Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-1896 | First vendor Publication | 2010-08-11 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability." |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1896 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:12006 | |||
| Oval ID: | oval:org.mitre.oval:def:12006 | ||
| Title: | Win32k User Input Validation Vulnerability | ||
| Description: | The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2010-1896 | Version: | 7 |
| Platform(s): | Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
ExploitDB Exploits
| id | Description |
|---|---|
| 2010-08-10 | Microsoft Windows CreateWindow Function Callback Vulnerability (MS10-048) |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2010-08-11 | Name : Microsoft Windows Kernel Mode Drivers Privilege Elevation Vulnerabilities (21... File : nvt/secpod_ms10-048.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 66982 | Microsoft Windows win32k.sys Driver User Mode Input Unspecified Local Privile... Microsoft Windows contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when the kernel-mode drivers in win32k.sys fail to properly validate user-mode input passed to kernel mode, allowing a local authenticated attacker to gain full user privileges. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-08-11 | Name : The Windows kernel is affected by several vulnerabilities that could allow es... File : smb_nt_ms10-048.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:07:52 |
|
| 2024-11-28 12:22:00 |
|
| 2024-10-18 00:28:11 |
|
| 2023-12-07 21:28:04 |
|
| 2021-05-04 12:11:36 |
|
| 2021-04-22 01:12:13 |
|
| 2020-05-23 00:25:50 |
|
| 2019-02-26 17:19:33 |
|
| 2018-10-13 00:22:57 |
|
| 2017-09-19 09:23:48 |
|
| 2016-08-31 12:02:09 |
|
| 2016-06-28 18:11:11 |
|
| 2016-04-26 19:49:26 |
|
| 2014-02-17 10:55:33 |
|
| 2013-05-10 23:25:12 |
|
