CVE-2010-4398Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Descripción

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• http://isc.sans.edu/diary.html?storyid=9988 ExploitIssue Tracking
• 45045 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• 15609 exploitExploitThird Party AdvisoryVDB Entry
• http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac/ Broken Link
• http://support.avaya.com/css/P8/documents/100127248 Third Party Advisory
• ADV-2011-0324 vdb-entryBroken Link
• http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/ Broken LinkExploitThird Party AdvisoryVDB Entry
• http://twitter.com/msftsecresponse/statuses/7590788200402945 Not Applicable
• MS11-011 vendor-advisoryPatchVendor Advisory
• 1025046 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• VU#529673 third-party-advisoryThird Party AdvisoryUS Government Resource
• 42356 third-party-advisoryBroken LinkVendor Advisory
• oval:org.mitre.oval:def:12162 vdb-entrysignatureBroken Link
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-4398 US Government Resource