Lucene search

K
cve[email protected]CVE-2010-2740
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-2740

2010-10-1319:00:00
CWE-264
web.nvd.nist.gov
24
microsoft
windows
xp
otf
font
parsing
vulnerability
nvd
cve-2010-2740

6.3 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.413 Medium

EPSS

Percentile

97.3%

The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka “OpenType Font Parsing Vulnerability.”

6.3 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.413 Medium

EPSS

Percentile

97.3%