PT-2010-4113 · Microsoft · Windows Xp+3

Published 2010-08-11 · Updated 2019-02-26 · CVE-2010-2566

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2

Description The issue arises from the improper validation of certificate request messages from TLS and SSL servers by the Secure Channel (SChannel) security package. This allows remote servers to execute arbitrary code via a crafted SSL response. A remote code execution vulnerability exists in the way SChannel on a client machine validates a certificate request message sent by the server. An attacker could host a specially crafted Web site designed to exploit this vulnerability through an Internet Web browser, but would need to convince a user to visit the Web site, typically by getting them to click a link in an e-mail message or in an Instant Messenger message.

Recommendations For Microsoft Windows XP SP2 and SP3, consider disabling the SChannel security package temporarily until a patch is available. For Microsoft Windows Server 2003 SP2, restrict access to the SChannel security package to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2566

Affected Products

Windows Server 2003

Windows Xp

Schannel

Windows

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2566 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2566 · Security Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-049 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11787 · Note
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Note