PT-2010-5180 · Microsoft · Windows Vista+5
Tarjei Mandt
·
Published
2010-12-16
·
Updated
2023-12-07
·
CVE-2010-3942
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Windows XP versions SP2 and SP3
Windows Server 2003 version SP2
Windows Vista versions SP1 and SP2
Windows Server 2008 versions Gold, SP2, and R2
Windows 7 (affected versions not specified)
Description
The issue is related to improper memory allocation for copies from user mode in the Windows kernel-mode drivers. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists in the way that Windows kernel-mode drivers improperly allocate memory when copying data from user mode. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk.
For Windows Server 2003 version SP2, update to a newer version to mitigate the risk.
For Windows Vista versions SP1 and SP2, update to a newer version to mitigate the risk.
For Windows Server 2008 versions Gold, SP2, and R2, update to a newer version to mitigate the risk.
For Windows 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Windows
Windows 7
Windows Server 2003
Windows Server 2008
Windows Vista
Windows Xp