PT-2010-5196 · Microsoft · Windows Vista+3

Cesar Cerrudo · Published 2010-12-16 · Updated 2023-12-07 · CVE-2010-3961

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 (affected versions not specified)

Description The issue arises from the Consent User Interface (UI) not properly handling an unspecified registry-key value. This allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application. The vulnerability could allow an attacker to run code with elevated privileges, potentially executing arbitrary code and taking complete control of an affected system. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Vista versions SP1 through SP2, update to a version that properly handles registry-key values to prevent elevation of privilege. For Microsoft Windows Server 2008 versions Gold through SP2 and R2, apply a configuration change to restrict the Consent UI's ability to process special registry values. For Microsoft Windows 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-3961

Affected Products

Windows

Windows 7

Windows Server 2008

Windows Vista

References · 11

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-100 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3961 · Security Note
• http://secunia.com/advisories/42614 · Vendor Advisory
• http://vupen.com/english/advisories/2010/3222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3961 · Security Note
• http://osvdb.org/69824 · Note
• http://securityfocus.com/bid/45318 · Note
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Note
• http://securitytracker.com/id?1024882 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-100 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12323 · Note