Lucene search

K
cve[email protected]CVE-2010-2743
HistoryJan 20, 2011 - 9:00 p.m.

CVE-2010-2743

2011-01-2021:00:00
NVD-CWE-Other
web.nvd.nist.gov
33
windows xp
sp3
kernel-mode
driver
privilege escalation
crafted application
nvd
cve-2010-2743

6.1 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.9%

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka β€œWin32k Keyboard Layout Vulnerability.” NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.

6.1 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.9%