CVE

Id
45327  
CVE No.
CVE-2010-2743  
Status
Candidate  
Description
The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.  
Phase
Assigned (20100714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493729 45327 CVE-2010-2743 MS:MS10-073  View
493730 45327 CVE-2010-2743 URL:http://www.microsoft.com/technet/security/Bulletin/MS10-073.mspx  View
493731 45327 CVE-2010-2743 CERT:TA10-285A  View
493732 45327 CVE-2010-2743 URL:http://www.us-cert.gov/cas/techalerts/TA10-285A.html  View
493733 45327 CVE-2010-2743 OVAL:oval:org.mitre.oval:def:7514  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36404 JVNDB-2010-002184 Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 Microsoft Word および Microsoft Office は、Word ドキュメントの構文解析の際、初期化されていないポインタを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-2747 45327 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002184.html  View