PT-2010-3520 · Microsoft · Windows Vista+5

Nicolã¡S Economou · Published 2010-08-11 · Updated 2023-12-07 · CVE-2010-1897

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, and R2 Microsoft Windows 7

Description The issue arises from the improper validation of pseudo-handle values in callback parameters during window creation by Windows kernel-mode drivers. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists because Windows kernel-mode drivers do not properly validate all parameters when creating a new window. An attacker who successfully exploits this issue could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 and SP3, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2003 version SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Vista versions SP1 and SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2008 versions Gold, SP2, and R2, update to a newer version that includes the fix for this issue. For Microsoft Windows 7, update to a newer version that includes the fix for this issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-1897

Affected Products

Windows

Windows 7

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 7

• 🔥 https://exploit-db.com/exploits/14608 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1897 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-1897 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11663 · Note
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-048 · Note