CVE

Id
45133  
CVE No.
CVE-2010-2549  
Status
Candidate  
Description
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."  
Phase
Assigned (20100630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
492199 45133 CVE-2010-2549 EXPLOIT-DB:14156  View
492200 45133 CVE-2010-2549 URL:http://www.exploit-db.com/exploits/14156  View
492201 45133 CVE-2010-2549 FULLDISC:20100630 MSRC-001: Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use-after-free Vulnerability  View
492202 45133 CVE-2010-2549 URL:http://seclists.org/fulldisclosure/2010/Jul/3  View
492203 45133 CVE-2010-2549 CERT:TA10-285A  View
492204 45133 CVE-2010-2549 URL:http://www.us-cert.gov/cas/techalerts/TA10-285A.html  View
492205 45133 CVE-2010-2549 BID:41280  View
492206 45133 CVE-2010-2549 URL:http://www.securityfocus.com/bid/41280  View
492207 45133 CVE-2010-2549 OSVDB:66003  View
492208 45133 CVE-2010-2549 URL:http://osvdb.org/66003  View
492209 45133 CVE-2010-2549 OVAL:oval:org.mitre.oval:def:12215  View
492210 45133 CVE-2010-2549 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12215  View
492211 45133 CVE-2010-2549 SECUNIA:40421  View
492212 45133 CVE-2010-2549 URL:http://secunia.com/advisories/40421  View
492213 45133 CVE-2010-2549 XF:ms-win-ntusercheck-priv-escalation(60120)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36141 JVNDB-2010-001921 Microsoft Windows の Cinepak コーデックにおける任意のコードを実行される脆弱性 Microsoft Windows の Cinepak コーデックには、メディアファイルを適切に解凍しないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-2553 45133 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001921.html  View