Lucene search
HistoryAug 11, 2010 - 6:47 p.m.
CVE-2010-1895
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
9.5%
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka βWin32k Pool Overflow Vulnerability.β
Affected configurations
Node
microsoftwindows_2003_serversp2
ORmicrosoftwindows_2003_serversp2itanium
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
Related
prion
prion
Buffer overflow
2010-08-11 18:47:00
cvelist
cvelist
CVE-2010-1895
2010-08-11 18:00:00
symantec
symantec
cve
cve
CVE-2010-1895
2010-08-11 18:47:50
seebug
seebug
openvas
openvas
nessus
nessus
securityvulns
securityvulns
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2010-1895