CVE-2010-1889

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2

Description The issue is related to object initialization during error handling, allowing local users to gain privileges via a crafted application. An elevation of privilege exists in the Windows Kernel due to the way the kernel initializes objects while handling certain errors. An attacker who successfully exploited this issue could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Vista versions SP1 through SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2008 versions Gold through SP2, update to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to the kernel to minimize the risk of exploitation.