Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0232
HistoryJan 21, 2010 - 7:30 p.m.

CVE-2010-0232

2010-01-2119:30:00
CWE-264
[email protected]
web.nvd.nist.gov
861
In Wild
windows
kernel
vulnerability
privilege escalation
16-bit
ntvdm
nvd
cve-2010-0232

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.2%

JSON

The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka β€œWindows Kernel Exception Handler Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000Matchsp4
OR
microsoftwindows_7Match-
OR
microsoftwindows_ntMatch3.1
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Matchsp2x32
OR
microsoftwindows_vista
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatchsp1
OR
microsoftwindows_vistaMatchsp2
OR
microsoftwindows_xpMatch-
OR
microsoftwindows_xpMatch-sp2x64
OR
microsoftwindows_xpMatchsp3

Related

packetstorm 3
exploitpack 1
checkpoint_advisories 2
cisa_kev 1
cvelist 1
seebug 3
n0where 1
attackerkb 1
openvas 6
zdt 1
securityvulns 5
canvas 1
prion 1
nvd 1
metasploit 1
kitploit 1
thn 1
exploitdb 1
nessus 1
packetstorm
packetstorm
Windows SYSTEM Escalation Via KiTrap0D
2013-11-14 00:00:00
Microsoft Windows NT User Mode To Ring 0 Escalation
2010-01-20 00:00:00
VMware High-Bandwidth Backdoor ROM Overwrite Privilege Elevation
2012-03-30 00:00:00
exploitpack
exploitpack
Microsoft Windows NT200020032008XPVista7 - KiTrap0D User Mode to Ring Escalation (MS10-015)
2010-01-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Windows Kernel Exception Handler Vulnerability (MS10-015)
2010-02-12 00:00:00
Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)
2010-02-28 00:00:00
cisa_kev
cisa_kev
Microsoft Windows Kernel Exception Handler Vulnerability
2022-03-03 00:00:00
cvelist
cvelist
CVE-2010-0232
2010-01-21 19:00:00
seebug
seebug
Microsoft Windows #GPι™·ι˜±ε€„η†ε™¨ζœ¬εœ°ζƒι™ζε‡ζΌζ΄ž
2010-01-22 00:00:00
Windows NT - User Mode to Ring 0 Escalation Vulnerability
2014-07-01 00:00:00
Microsoft Windowsε†…ζ ΈεŒι‡ι‡Šζ”Ύζœ¬εœ°ζƒι™ζε‡ζΌζ΄žοΌˆMS10-015οΌ‰
2010-02-25 00:00:00
n0where
n0where
SQL Server Takeover Tool: Sqlninja
2011-07-09 14:34:00
attackerkb
attackerkb
CVE-2010-0232
2010-01-21 00:00:00
openvas
openvas
Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
2010-01-22 00:00:00
Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
2010-01-22 00:00:00
Microsoft Windows IPv4 Default Configuration Security Bypass Vulnerability
2011-04-11 00:00:00
zdt
zdt
Windows SYSTEM Escalation Via KiTrap0D
2013-11-15 00:00:00
securityvulns
securityvulns
Microsoft Windows kernel privilege escalation
2010-01-26 00:00:00
Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack
2010-01-26 00:00:00
Microsoft Windows kernel privilege escalation
2010-02-10 00:00:00
canvas
canvas
Immunity Canvas: MS_NTVDM
2010-01-21 19:30:00
prion
prion
Privilege escalation
2010-01-21 19:30:00
nvd
nvd
CVE-2010-0232
2010-01-21 19:30:00
metasploit
metasploit
Windows SYSTEM Escalation via KiTrap0D
2013-11-11 07:14:40
kitploit
kitploit
WHP - Microsoft Windows Hacking Pack
2018-04-22 21:32:00
thn
thn
Sqlninja 0.2.6 is now available
2011-11-07 19:02:00
exploitdb
exploitdb
Microsoft Windows NT/2000/2003/2008/XP/Vista/7 - 'KiTrap0D' User Mode to Ring Escalation (MS10-015)
2010-01-19 00:00:00
nessus
nessus
MS10-015: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (977165)
2010-02-09 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.2%

JSON
Related for CVE-2010-0232
packetstorm3exploitpack1checkpoint_advisories2cisa_kev1cvelist1seebug3n0where1attackerkb1openvas6zdt1securityvulns5canvas1prion1nvd1metasploit1kitploit1thn1exploitdb1nessus1