Lucene search

K
cve[email protected]CVE-2010-0234
HistoryApr 14, 2010 - 4:00 p.m.

CVE-2010-0234

2010-04-1416:00:01
CWE-20
web.nvd.nist.gov
28
cve-2010-0234
windows
kernel
null pointer
vulnerability
microsoft
nvd
denial of service
registry key
local user

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka β€œWindows Kernel Null Pointer Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000sp4
Node
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_server_2003sp2
Node
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
Node
microsoftwindows_vista
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_vistaMatch-sp2

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%