Executive Summary

TitleVulnerability in Windows Client/Server Run
NameMS10-011First vendor Publication2010-02-09
VendorMicrosoftLast vendor Modification2010-06-09
Severity (Vendor) ImportantRevision1.2

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score6.9Attack RangeLocal
Cvss Impact Score10Attack ComplexityMedium
Cvss Expoit Score3.4AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores


Revision Note: V1.2 (June 9, 2010): Added a link to Microsoft Knowledge Base Article 978037 under Known Issues in the Executive Summary.Summary: This security update resolves a privately reported vulnerability in Microsoft Windows Client/Server Run-time Subsystem (CSRSS). The vulnerability could allow elevation of privilege if an attacker logs on to the system and starts a specially crafted application designed to continue running after the attacker logs out. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The vulnerability could not be exploited by anonymous users.

Original Source

Url : http://www.microsoft.com/technet/security/bulletin/MS10-011.mspx

CWE : Common Weakness Enumeration

100 %CWE-264Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:8304
Oval ID: oval:org.mitre.oval:def:8304
Title: CSRSS Local Privilege Elevation Vulnerability
Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2010-0023
Version: 1
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Definition Synopsis:

CPE : Common Platform Enumeration


OpenVAS Exploits

2010-02-10Name : Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability...
File : nvt/secpod_ms10-011.nasl

Open Source Vulnerability Database (OSVDB)

62252Microsoft Windows Client/Server Run-time Subsystem (CSRSS) Session Terminatio...

Nessus® Vulnerability Scanner

2010-02-09Name : Users can elevate their privileges on the remote host.
File : smb_nt_ms10-011.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
2014-02-17 11:46:28
  • Multiple Updates