Lucene search

K
cve[email protected]CVE-2010-1890
HistoryAug 11, 2010 - 6:47 p.m.

CVE-2010-1890

2010-08-1118:47:50
CWE-20
web.nvd.nist.gov
33
microsoft
windows
vista
server 2008
windows 7
kernel
acl
denial of service
vulnerability
nvd
cve-2010-1890

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.9%

The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka “Windows Kernel Improper Validation Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7
OR
microsoftwindows_7Match-
OR
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008r2itanium
OR
microsoftwindows_server_2008r2x64
OR
microsoftwindows_server_2008sp2x32
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008Match-itanium
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_vistaMatch-sp2

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.9%