PT-2010-4748 · Microsoft · Windows Task Scheduler+4

Alexander Gostev + 10 · Published 2010-12-16 · Updated 2023-12-07 · CVE-2010-3338

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP1 and SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Microsoft Windows 7

Description The Windows Task Scheduler does not properly determine the security context of scheduled tasks, allowing local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the improper validation of scheduled tasks' security context. This could allow an attacker to run arbitrary code in the security context of the local system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Vista SP1 and SP2, update to a version that properly validates the security context of scheduled tasks. For Microsoft Windows Server 2008 Gold, SP2, and R2, apply the necessary patch to fix the improper validation issue. For Microsoft Windows 7, ensure that the Windows Task Scheduler is updated to a version that correctly determines the security context of scheduled tasks.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-3338

Affected Products

Windows

Windows 7

Windows Server 2008

Windows Task Scheduler

Windows Vista

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms10_092_schelevator.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15589 · Exploit
• 🔥 https://exploit-db.com/exploits/19930 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3338 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-092 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3338 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12304 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-092 · Note
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Note
• http://securitytracker.com/id?1024874 · Note