CVE-2010-1890

CVE-2010-1890 affects the Windows kernel ACL validation on kernel objects (nt!SeObjectCreateSaclAccessBits). The root cause is improper bounds checking of ACL/ACE data, allowing a local attacker to trigger a denial-of-service reboot via a crafted application on affected platforms. Affected produc...

CVE-2010-1887

CVE-2010-1887 affects the Windows kernel‑mode driver win32k.sys and is triggered by improper validation of a system call argument, causing a denial of service (system hang) on XP SP2/3, Server 2003 SP2, Vista SP1/SP2, Server 2008 (Gold/SP2/R2), and Windows 7. Connected documents also describe rel...

CVE-2010-1889

CVE-2010-1889 describes a kernel double-free vulnerability in Windows Vista SP1/SP2 and Windows Server 2008 Gold/SP2, allowing local privilege escalation via a crafted application related to object initialization during error handling. Public material ties this to the Kernel Transaction Manager (...

CVE-2010-1897

CVE-2010-1897 affects Windows kernel-mode drivers in win32k.sys across Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 SP2/R2, and Windows 7. The vulnerability arises from improper validation of pseudo-handle values passed in callback parameters during Crea...

CVE-2010-1893

CVE-2010-1893 corresponds to an Integer Overflow in the Windows TCP/IP stack that affects Windows Vista SP1, Windows Server 2008 (Gold/R2), and Windows 7. The vulnerability arises when user-mode data is copied to kernel memory, leading to a pool/heap overflow in the IppSortDestinationAddresses/Ip...

CVE-2010-1892

CVE-2010-1892 is a DoS vulnerability in the Windows TCP/IP stack caused by improper handling of malformed IPv6 packets. Affected products include Windows Vista SP1/SP2, Windows Server 2008 (Gold/SP2/R2), and Windows 7. The issue arises from processing IPv6 extension headers, leading to a system h...

CVE-2010-1889

Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."...

CVE-2010-1896

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted...

PT-2010-3515 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 Description: A denial of service issue exists due to improper handling of malformed IPv6 packets by the TCP/IP stack...

Microsoft Security Bulletin MS10-058 - Important Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

Microsoft Security Bulletin MS10-058 - Important Vulnerabilities in TCP/IP Could Allow Elevation of Privilege 978886 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Windows. The more...

Microsoft Security Bulletin MS10-051 - Critical Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)

Microsoft Security Bulletin MS10-051 - Critical Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution 2079403 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft XML Co...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852)

This host is missing an important security update according to Microsoft Bulletin MS10-047. OpenVAS Vulnerability Test $Id: secpodms10-047.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Privilege Elevation Vulnerabilities 981852 Authors: Madhuri D Updated By: Madhuri D on...

PT-2010-3513 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 Description: A denial of service issue exists due to improper validation of access control lists on kernel objects. Th...

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

The TCP/IP stack installed on the remote Windows host is affected by one or more of the following vulnerabilities : - An error exists in the Windows TCP/IP stack when processing specially crafted IPv6 packets with a malformed extension header that could cause the affected system to stop respondin...

Microsoft Security Bulletin MS10-054 - Critical Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)

Microsoft Security Bulletin MS10-054 - Critical Vulnerabilities in SMB Server Could Allow Remote Code Execution 982214 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Windows. The...

PT-2010-4102 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not specified Description: The issue arises from incorrect access control lists ACLs on the...

PT-2010-3512 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Description: The issue is related to object initialization during error handling, allowing local users to gain privileges via a crafted...

PT-2010-4103 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not specified Description: The issue arises from the Tracing Feature for Services not proper...

Remote Code Execution Vulnerabilities in SChannel (980436)

This host is missing a critical security update according to Microsoft Bulletin MS10-049. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)

Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege 982799 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and one...