PT-2010-5143 · Microsoft · Windows

Liam Omurchu · Published 2010-10-08 · Updated 2018-08-13 · CVE-2010-3889

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description The issue concerns an unspecified vulnerability in Microsoft Windows on 32-bit platforms, allowing local users to gain privileges via unknown vectors. It has been exploited in the wild, notably by the Stuxnet worm in July 2010. This was identified by both Microsoft researchers and other external researchers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-3889

Affected Products

Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-3889 · Security Note
• http://securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061 · Note
• http://computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_ · Note
• http://virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml · Note
• http://symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities · Note
• http://eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29 · Note
• http://virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml · Note