PT-2010-4256 · Microsoft · Windows Server 2003+2

Sebastian Apelt · Published 2010-10-13 · Updated 2019-02-26 · CVE-2010-2740

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2

Description The issue arises from improper memory allocation during font parsing in the OpenType Font (OTF) format driver. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the improper parsing of specially crafted OpenType fonts, which could enable an attacker to run arbitrary code in kernel mode. This could lead to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a version that properly allocates memory during font parsing to prevent privilege escalation. For Microsoft Windows Server 2003 version SP2, ensure that the OpenType Font format driver is updated to correctly parse OpenType fonts and prevent arbitrary code execution in kernel mode.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2740

Affected Products

Windows Server 2003

Windows Xp

Windows

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2740 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2740 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-078 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA10-285A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7258 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-078 · Note
• http://support.avaya.com/css/P8/documents/100113218 · Note