Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2010-1890 | First vendor Publication | 2010-08-11 |
Vendor | Cve | Last vendor Modification | 2023-12-07 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:L/Au:S/C:N/I:N/A:C) | |||
---|---|---|---|
Cvss Base Score | 4.6 | Attack Range | Local |
Cvss Impact Score | 6.9 | Attack Complexity | Low |
Cvss Expoit Score | 3.1 | Authentication | Requires single instance |
Calculate full CVSS 2.0 Vectors scores |
Detail
The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability." |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1890 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-20 | Improper Input Validation |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:11789 | |||
Oval ID: | oval:org.mitre.oval:def:11789 | ||
Title: | Windows Kernel Improper Validation Vulnerability | ||
Description: | The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability." | ||
Family: | windows | Class: | vulnerability |
Reference(s): | CVE-2010-1890 | Version: | 5 |
Platform(s): | Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 | Product(s): | |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
ExploitDB Exploits
id | Description |
---|---|
2010-08-17 | Microsoft Windows nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks ... |
OpenVAS Exploits
Date | Description |
---|---|
2010-08-11 | Name : Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852) File : nvt/secpod_ms10-047.nasl |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
66990 | Microsoft Windows Kernel Object ACL Validation SeObjectCreateSaclAccessBits()... Microsoft Windows contains a flaw that may allow a local authenticated denial of service. The issue is triggered when the kernel fails to properly validate access control lists in the 'SeObjectCreateSaclAccessBits()' function on kernel objects, and will result in loss of availability for the platform. |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2010-08-11 | Name : The Windows kernel is affected by several vulnerabilities that could allow es... File : smb_nt_ms10-047.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Source | Url |
---|---|
MS | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10... |
OVAL | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova... |
Alert History
Date | Informations |
---|---|
2024-02-02 01:13:21 |
|
2024-02-01 12:03:39 |
|
2023-12-07 21:28:04 |
|
2023-09-05 12:12:25 |
|
2023-09-05 01:03:30 |
|
2023-09-02 12:12:28 |
|
2023-09-02 01:03:32 |
|
2023-08-12 12:14:49 |
|
2023-08-12 01:03:32 |
|
2023-08-11 12:12:31 |
|
2023-08-11 01:03:40 |
|
2023-08-06 12:12:03 |
|
2023-08-06 01:03:34 |
|
2023-08-04 12:12:08 |
|
2023-08-04 01:03:35 |
|
2023-07-14 12:12:04 |
|
2023-07-14 01:03:33 |
|
2023-03-29 01:13:49 |
|
2023-03-28 12:03:39 |
|
2022-10-11 12:10:46 |
|
2022-10-11 01:03:21 |
|
2021-05-04 12:11:36 |
|
2021-04-22 01:12:13 |
|
2020-05-23 00:25:50 |
|
2018-10-31 00:20:03 |
|
2018-10-13 00:22:57 |
|
2017-09-19 09:23:48 |
|
2016-08-31 12:02:09 |
|
2016-08-05 12:02:30 |
|
2016-06-28 18:11:09 |
|
2016-04-26 19:49:23 |
|
2014-02-17 10:55:32 |
|
2013-05-10 23:25:11 |
|