CVE-2010-0481

Description

The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry keys virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka Windows Virtual Path Parsing Vulnerability.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.67

Associated Vulnerability

VulnerabilityOS Platform
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows 2000 (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows XP (KB979683) x86 based systemsWindows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows XP (KB979683) x86 based systems for SP3Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2003 (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Vista (KB979683) x86 based systemsWindows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Vista (KB979683) x86 based systems for SP1Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Vista (KB979683) x86 based systems for SP2Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2008 (KB979683) x86 based systemsWindows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2008 (KB979683) x86 based systems for SP2Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows 7 (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows XP x64 Edition (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2003 x64 Edition (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Vista for x64-based Systems (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Vista for x64-based Systems (KB979683) for SP1Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Vista for x64-based Systems (KB979683) for SP2Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2008 x64 Edition (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2008 x64 Edition (KB979683) for SP2Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows 7 for x64-based Systems (KB979683)Windows
ms10-021: vulnerabilities in windows kernel could allow elevation of privilege for Windows Server 2008 R2 x64 Edition (KB979683)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-8346Security Update for Windows Server 2003 (KB979683)
PATCH-8349Security Update for Windows Vista (KB979683)
PATCH-8351Security Update for Windows Server 2008 (KB979683)
PATCH-8352Security Update for Windows 7 (KB979683)
PATCH-8357Security Update for Windows Vista for x64-based Systems (KB979683)
PATCH-8359Security Update for Windows Server 2008 x64 Edition (KB979683)
PATCH-8360Security Update for Windows 7 for x64-based Systems (KB979683)
PATCH-8361Security Update for Windows Server 2008 R2 x64 Edition (KB979683)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234