CVE-2010-3888

{"id": "CVE-2010-3888", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-10-08T22:00:37.317", "references": [{"url": "http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_", "source": "cve@mitre.org"}, {"url": "http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716", "source": "cve@mitre.org"}, {"url": "http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061", "source": "cve@mitre.org"}, {"url": "http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities", "source": "cve@mitre.org"}, {"url": "http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml", "source": "cve@mitre.org"}, {"url": "http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Microsoft Windows para plataformas de 32 bits permite a usuarios locales obtener privilegios a trav\u00e9s de vectores desconocidos, tal y como se pudo comprobar en Julio de 2010 cuando el gusano Stuxnet aprovecho esta vulnerabilidad y pudo ser identificada por investigadores de Kaspersky entre otros."}], "lastModified": "2010-10-11T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}