Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2010-3338
HistoryDec 16, 2010 - 7:33 p.m.

CVE-2010-3338

2010-12-1619:33:02
CWE-20
microsoft
web.nvd.nist.gov
48
windows
task scheduler
vulnerability
privilege escalation
cve-2010-3338
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON

The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka “Task Scheduler Vulnerability.” NOTE: this might overlap CVE-2010-3888.

Affected configurations

Nvd
Node
microsoftwindows_7Match-
OR
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008sp2x32
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
VendorProductVersionCPE
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*
microsoftwindows_vista*cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
Rows per page:
1-10 of 111

Related

cvelist 3
exploitdb 2
nvd 3
prion 3
seebug 2
metasploit 1
nessus 1
zdt 1
openvas 4
packetstorm 1
cve 2
securityvulns 1
cvelist
cvelist
CVE-2010-3338
2010-12-16 19:00:00
CVE-2010-3888
2010-10-08 21:00:00
CVE-2010-2743
2011-01-20 20:00:00
exploitdb
exploitdb
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
2012-07-19 00:00:00
Microsoft Windows - Task Scheduler Privilege Escalation
2010-11-20 00:00:00
nvd
nvd
CVE-2010-3338
2010-12-16 19:33:02
CVE-2010-3888
2010-10-08 22:00:37
CVE-2010-2743
2011-01-20 21:00:01
prion
prion
Design/Logic Flaw
2010-12-16 19:33:00
Code injection
2010-10-08 22:00:00
Hardcoded credentials
2011-01-20 21:00:00
seebug
seebug
Windows Task Scheduler Privilege Escalation 0day (CVE-2010-3338)
2014-07-01 00:00:00
Windows Escalate Task Scheduler XML Privilege Escalation
2012-07-20 00:00:00
metasploit
metasploit
Windows Escalate Task Scheduler XML Privilege Escalation
2012-06-13 05:58:20
nessus
nessus
MS10-092: Vulnerability in Task Scheduler Could Allow Elevation of Privilege (2305420)
2010-12-15 00:00:00
zdt
zdt
Windows Escalate Task Scheduler XML Privilege Escalation
2012-07-21 00:00:00
openvas
openvas
Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)
2010-12-15 00:00:00
Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)
2010-12-15 00:00:00
Microsoft Windows 32-bit Platforms Unspecified vulnerabilities
2010-10-18 00:00:00
packetstorm
packetstorm
Windows Escalate Task Scheduler XML Privilege Escalation
2012-07-19 00:00:00
cve
cve
CVE-2010-3888
2010-10-08 22:00:37
CVE-2010-2743
2011-01-20 21:00:01
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2010-12-15 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON
Related for CVE-2010-3338
cvelist3exploitdb2nvd3prion3seebug2metasploit1nessus1zdt1openvas4packetstorm1cve2securityvulns1