ID de Prueba:	1.3.6.1.4.1.25623.1.0.902323
Categoría:	Windows : Microsoft Bulletins
Título:	Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (981957)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS10-073.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-073. Vulnerability Insight: The flaw is due to an error in the kernel-mode device driver 'Win32k.sys' - when handling the reference count for an object. - which fails to properly index a table of function pointers when loading a keyboard layout from disk. - which fails to properly manage a window class. Vulnerability Impact: Successful exploitation could allow remote attackers to run arbitrary code in the kernel mode. Affected Software/OS: - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior - Microsoft Windows 7 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2549 BugTraq ID: 41280 http://www.securityfocus.com/bid/41280 Cert/CC Advisory: TA10-285A http://www.us-cert.gov/cas/techalerts/TA10-285A.html http://www.exploit-db.com/exploits/14156 http://seclists.org/fulldisclosure/2010/Jul/3 http://osvdb.org/66003 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12215 http://secunia.com/advisories/40421 XForce ISS Database: ms-win-ntusercheck-priv-escalation(60120) https://exchange.xforce.ibmcloud.com/vulnerabilities/60120 Common Vulnerability Exposure (CVE) ID: CVE-2010-2743 Microsoft Security Bulletin: MS10-073 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-073 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7514 Common Vulnerability Exposure (CVE) ID: CVE-2010-2744 http://www.exploit-db.com/exploits/15894 http://mista.nu/blog/2010/12/01/windows-class-handling-gone-wrong/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12085
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.