Lucene search

K
cve[email protected]CVE-2010-0235
HistoryApr 14, 2010 - 4:00 p.m.

CVE-2010-0235

2010-04-1416:00:01
CWE-20
web.nvd.nist.gov
29
microsoft
windows
kernel
symbolic link
vulnerability
nvd
cve-2010-0235

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka “Windows Kernel Symbolic Link Value Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000sp4
Node
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_server_2003sp2
Node
microsoftwindows_vista
OR
microsoftwindows_vistax64

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%