PT-2010-3516 · Microsoft · Windows+3

Matthieu Suiche · Published 2010-08-11 · Updated 2023-12-07 · CVE-2010-1893

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to an integer overflow in the TCP/IP stack, allowing local users to gain privileges. It is also described as an elevation of privilege vulnerability in TCP/IP processing due to an error in processing a specific input buffer. This could allow an attacker to run arbitrary code with system-level privileges, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7, update to a version that includes the fix for the integer overflow in the TCP/IP stack. For other affected versions of Microsoft Windows, apply the necessary patch or update to resolve the elevation of privilege vulnerability in TCP/IP processing.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2010-1893

Affected Products

Windows

Windows 7

Windows Server 2008

Windows Vista

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1893 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1893 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12087 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-058 · Note
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Note