The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 01:15
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://secunia.com/advisories/39456 - Vendor Advisory | |
| References | () http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 - Exploit | |
| References | () http://www.securityfocus.com/archive/1/510886/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/39631 - Exploit | 
07 Jul 2021, 16:08
| Type | Values Removed | Values Added | 
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64-enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:datacenter:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:datacenter:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:compute_cluster:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:compute_cluster:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-standard:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:storage:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:storage:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:standard:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:standard:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:compute_cluster:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:datacenter:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:storage:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:standard:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:storage:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-datacenter:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:standard:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:datacenter:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:compute_cluster:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:enterprise:*:*:*:*:* | cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:* | 
Information
                Published : 2010-05-06 12:47
Updated : 2025-04-11 00:51
NVD link : CVE-2010-1734
Mitre link : CVE-2010-1734
CVE.ORG link : CVE-2010-1734
JSON object : View
Products Affected
                microsoft
- windows_2003_server
- windows_server_2003
- windows_2000
- windows_xp
CWE
                
                    
                        
                        CWE-20
                        
            Improper Input Validation
