PT-2010-5182
CVE-2010-3944
·
Published
2010-12-16
·
Updated
2018-10-30
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Windows Server 2008 R2 (affected versions not specified)
Windows 7 (affected versions not specified)
Description
The issue is related to improper validation of user-mode input by the Windows kernel-mode drivers, which can be exploited by a local user to gain privileges via a crafted application. This could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Windows Server 2008 R2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Windows 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾