[email protected]CVE-2010-0235

HistoryApr 14, 2010 - 4:00 p.m.

CVE-2010-0235

2010-04-1416:00:00

CWE-20

[email protected]

web.nvd.nist.gov

microsoft

windows

kernel

symbolic link

vulnerability

nvd

cve-2010-0235

6.1 Medium

AI Score

Confidence

Low

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0005 Low

EPSS

Percentile

17.2%

JSON

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka “Windows Kernel Symbolic Link Value Vulnerability.”

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_xpmicrosoft windows xpeq-
microsoft:windows_server_2003microsoft windows server 2003eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereq*
microsoft:windows_vistamicrosoft windows vistaeq*

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_xp	microsoft windows xp	eq	-
microsoft:windows_server_2003	microsoft windows server 2003	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	*
microsoft:windows_vista	microsoft windows vista	eq	*

References

secunia.com/advisories/39373

www.securitytracker.com/id?1023850

www.us-cert.gov/cas/techalerts/TA10-103A.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7509

6.1 Medium

AI Score

Confidence

Low

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0005 Low

EPSS

Percentile

17.2%

JSON

Related for CVE-2010-0235

prion1 openvas2 securityvulns2 nessus1