Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-0819 | First vendor Publication | 2010-06-08 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability." |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0819 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:7072 | |||
| Oval ID: | oval:org.mitre.oval:def:7072 | ||
| Title: | OpenType CFF Font Driver Memory Corruption Vulnerability | ||
| Description: | Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2010-0819 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2010-06-09 | Name : Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (9... File : nvt/secpod_ms10-032.nasl |
| 2010-06-09 | Name : Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vu... File : nvt/secpod_ms10-037.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 65217 | Microsoft Windows OpenType Compact Font Format (CFF) Driver Privilege Escalation Microsoft Windows contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when a boundary error occurs in the Windows OpenType Compact Font Format (CFF) driver, allowing a local attacker to overwrite kernel memory when getting a glyph outline and gain elevated privileges. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-06-09 | Name : The remote Windows host contains a font driver that is affected by a privileg... File : smb_nt_ms10-037.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:08:26 |
|
| 2024-11-28 12:21:19 |
|
| 2024-08-02 12:13:15 |
|
| 2024-08-02 01:03:35 |
|
| 2024-02-02 01:12:51 |
|
| 2024-02-01 12:03:31 |
|
| 2023-12-07 21:28:04 |
|
| 2023-09-05 12:11:58 |
|
| 2023-09-05 01:03:22 |
|
| 2023-09-02 12:12:00 |
|
| 2023-09-02 01:03:25 |
|
| 2023-08-12 12:14:14 |
|
| 2023-08-12 01:03:24 |
|
| 2023-08-11 12:12:04 |
|
| 2023-08-11 01:03:32 |
|
| 2023-08-06 12:11:36 |
|
| 2023-08-06 01:03:26 |
|
| 2023-08-04 12:11:41 |
|
| 2023-08-04 01:03:27 |
|
| 2023-07-14 12:11:37 |
|
| 2023-07-14 01:03:25 |
|
| 2023-03-29 01:13:18 |
|
| 2023-03-28 12:03:31 |
|
| 2022-10-11 12:10:22 |
|
| 2022-10-11 01:03:13 |
|
| 2021-05-04 12:11:17 |
|
| 2021-04-22 01:11:47 |
|
| 2020-05-23 00:25:23 |
|
| 2018-10-31 00:20:02 |
|
| 2018-10-13 00:22:55 |
|
| 2018-09-20 12:08:17 |
|
| 2017-09-19 09:23:40 |
|
| 2017-08-17 09:22:56 |
|
| 2016-09-30 01:02:21 |
|
| 2016-08-31 12:02:05 |
|
| 2016-08-05 12:02:26 |
|
| 2016-06-28 18:04:16 |
|
| 2016-04-26 19:37:42 |
|
| 2014-02-17 10:54:11 |
|
| 2013-05-10 23:19:33 |
|
