NVD

Id
14184  
Name
CVE-2010-2740  
Description
The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-13  
Modified Date
2011-10-04  
Seq
2010-2740  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78376 14184 CVE-2010-2740 oval:org.mitre.oval:def:7258  View
78377 14184 CVE-2010-2740 http://support.avaya.com/css/P8/documents/100113218  View
78378 14184 CVE-2010-2740 MS10-078  View
78379 14184 CVE-2010-2740 TA10-285A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36402 JVNDB-2010-002182 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 複数の Microsoft 製品の OpenType Font (OTF) フォーマットドライバは、フォント構文解析の際、メモリ割り当て処理を適切に行わないため、権限を取得される脆弱性が存在します。 CVE-2010-2740 45320 CVE-2010-2740 14184 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002182.html 2010-10-12 2010-10-26 View