NVD

Id
14176  
Name
CVE-2010-2729  
Description
The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create files in a system directory, and consequently execute arbitrary code, by sending a crafted print request over RPC, as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-15  
Modified Date
2011-07-18  
Seq
2010-2729  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78356 14176 CVE-2010-2729 oval:org.mitre.oval:def:7358  View
78357 14176 CVE-2010-2729 MS10-061  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36312 JVNDB-2010-002092 Microsoft Windows の Print Spooler サービスにおける任意のコードを実行される脆弱性 Microsoft Windows の Print Spooler サービスは、プリンタ共有が有効な際、スプーラのアクセス許可を適切に検証しないため、システムディレクトリ内にファイルを作成され、任意のコードを実行される脆弱性が存在します。 CVE-2010-2729 45309 CVE-2010-2729 14176 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002092.html 2010-09-14 2010-10-05 View