CVE-2010-0233

Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.us-cert.gov/cas/techalerts/TA10-040A.html	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_2000:sp4:::::::*
	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
	cpe:2.3:o:microsoft:windows_server_2008:::itanium:::::*
	cpe:2.3:o:microsoft:windows_server_2008:::x32:::::*
	cpe:2.3:o:microsoft:windows_server_2008:::x64:::::*
	cpe:2.3:o:microsoft:windows_server_2008::sp2:x64:::::
	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:::::*
	cpe:2.3:o:microsoft:windows_server_2008:sp2:x32::::::
	cpe:2.3:o:microsoft:windows_vista::::::::
	cpe:2.3:o:microsoft:windows_vista:sp1:::::::*
	cpe:2.3:o:microsoft:windows_vista:sp2:::::::*
	cpe:2.3:o:microsoft:windows_xp:-:::::::*
	cpe:2.3:o:microsoft:windows_xp:sp3:::::::*

History

No history.

Information

Published : 2010-02-10 18:30

Updated : 2024-02-04 17:54

NVD link : CVE-2010-0233

Mitre link : CVE-2010-0233

CVE.ORG link : CVE-2010-0233

JSON object : View

Products Affected

microsoft

windows_xp
windows_server_2008
windows_2000
windows_vista
windows_server_2003

CWE

NVD-CWE-Other

{"id": "CVE-2010-0233", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-02-10T18:30:01.407", "references": [{"url": "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "tags": ["US Government Resource"], "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392", "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka \"Windows Kernel Double Free Vulnerability.\""}, {"lang": "es", "value": "Vulnerabilidad de doble liberaci\u00f3n en el n\u00facleo de Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, permite a usuarios locales obtener privilegios a trav\u00e9s de una aplicaci\u00f3n manipulada. Tambi\u00e9n conocida como \"Vulnerabilidad de doble liberaci\u00f3n en el n\u00facleo de Microsoft Windows\""}], "lastModified": "2019-02-26T14:04:01.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11AFB73A-1C61-40F1-8415-E4D40BB2699B"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F6EA111-A4E6-4963-A0C8-F9336C605B6E"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CFB1A97-8042-4497-A45D-C014B5E240AB"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F9C7616-658D-409D-8B53-AC00DC55602A"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFF81F4B-7D92-4398-8658-84530FB8F518"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AE15F6C-80F6-43A6-86DA-B92116A697A0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9517571A-BC1A-4838-A094-30081A86D36C"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49F99773-D1AF-4596-856A-CA164D4B68E5"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F916C0D-3B99-46F3-A7AE-BAF067361499"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B47EBFCC-1828-45AB-BC6D-FB980929A81A"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E69F8C21-5996-4083-A02A-F04AE948CEA9"}], "operator": "OR"}]}], "evaluatorComment": "Per: http://cwe.mitre.org/data/slices/2000.html#d\r\n\r\n\"CWE-415 Double Free\" vulnerability", "sourceIdentifier": "secure@microsoft.com"}