CVE-2010-4398

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 8,7%

Kerentanan Out-of-bounds Write pada microsoft windows 7, microsoft windows server 2003 +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 28 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."

Rincian

Terbit di NVD

6 Desember 2010

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

8,7% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Masuk KEV

28 Maret 2022

Tenggat CISA

21 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://secunia.com/advisories/42356 broken link · advisory vendor
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-011 patch · advisory vendor
• http://www.kb.cert.org/vuls/id/529673 advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-4398 pemerintah AS
• http://support.avaya.com/css/P8/documents/100127248 advisory pihak ketiga
• http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ broken link · exploit · advisory pihak ketiga · vdb entry
• http://www.exploit-db.com/exploits/15609/ exploit · advisory pihak ketiga · vdb entry
• http://www.securityfocus.com/bid/45045 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id?1025046 broken link · advisory pihak ketiga · vdb entry
• http://isc.sans.edu/diary.html?storyid=9988 exploit · issue tracking
• http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac/ broken link
• http://twitter.com/msftsecresponse/statuses/7590788200402945 not applicable
• http://www.vupen.com/english/advisories/2011/0324 broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12162 broken link