CVE-2010-4398
HIGH
7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
7,2
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka 'Driver Improper Interaction with Windows Kernel Vulnerability.'
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,1108
Percentile
0,9th
Updated
EPSS Score Trend (Last 91 Days)
787
Out-of-bounds Write
DraftCommon Consequences
Security Scopes Affected:
Integrity
Availability
Other
Potential Impacts:
Modify Memory
Execute Unauthorized Code Or Commands
Dos: Crash, Exit, Or Restart
Unexpected State
Applicable Platforms
Languages:
Assembly, C, C++, Memory-Unsafe
Technologies:
ICS/OT
Exploit
Microsoft Windows Vista/7 - Local Privilege Escalation (UAC …
VerifiedMicrosoft Windows Vista/7 - Local Privilege Escalation (UAC Bypass)
View Exploit Code →
Operating System
Windows Server 2003 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Server 2008 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Server 2008 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Vista by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Server 2008 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Vista by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Xp by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows Xp by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Windows 7 by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010…
http://isc.sans.edu/diary.html?storyid=9988
http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-u…
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-0…
http://secunia.com/advisories/42356
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://support.avaya.com/css/P8/documents/100127248
http://twitter.com/msftsecresponse/statuses/7590788200402945
http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista…
http://www.exploit-db.com/exploits/15609/
http://www.kb.cert.org/vuls/id/529673
http://www.securityfocus.com/bid/45045
http://www.securitytracker.com/id?1025046
http://www.vupen.com/english/advisories/2011/0324
http://isc.sans.edu/diary.html?storyid=9988
http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-u…
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-0…
http://secunia.com/advisories/42356
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://support.avaya.com/css/P8/documents/100127248
http://twitter.com/msftsecresponse/statuses/7590788200402945
http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista…
http://www.exploit-db.com/exploits/15609/
http://www.kb.cert.org/vuls/id/529673
http://www.securityfocus.com/bid/45045
http://www.securitytracker.com/id?1025046
http://www.vupen.com/english/advisories/2011/0324