PT-2010-5198 · Microsoft · Windows Server 2003+2

Honggang Ren · Published 2010-12-16 · Updated 2019-02-26 · CVE-2010-3963

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2

Description The issue is related to a buffer overflow in the Routing and Remote Access NDProxy component of the Windows kernel, caused by improper copying from user mode to the kernel. This is due to improper validation of input passed from user mode to the kernel. A local attacker could exploit this to run code with elevated privileges, execute arbitrary code, and take complete control of an affected system.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a version that includes the fix for the kernel NDProxy buffer overflow issue. For Microsoft Windows Server 2003 version SP2, update to a version that includes the fix for the kernel NDProxy buffer overflow issue. As a temporary workaround, consider restricting access to the Routing and Remote Access service (RRAS) to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3963

Affected Products

Windows Server 2003

Windows Xp

Windows

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2010-3963 · Security Note
• http://secunia.com/advisories/42613 · Vendor Advisory
• http://vupen.com/english/advisories/2010/3221 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3963 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-099 · Vendor Advisory
• http://securitytracker.com/id?1024881 · Note
• http://securityfocus.com/bid/45269 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12461 · Note
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Note
• http://osvdb.org/69823 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-099 · Note