Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability
BID:45298
Info
Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability
| Bugtraq ID: | 45298 |
| Class: | Unknown |
| CVE: |
CVE-2010-3944 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 14 2010 12:00AM |
| Updated: | Dec 17 2010 03:24PM |
| Credit: | Stéfan Le Berre of Sysdream |
| Vulnerable: |
Microsoft Windows Server 2008 R2 x64 0 Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows 7 XP Mode 0 Microsoft Windows 7 Ultimate 0 Microsoft Windows 7 Starter 0 Microsoft Windows 7 Professional 0 Microsoft Windows 7 Home Premium 0 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for 32-bit Systems 0 Microsoft Windows 7 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya Communication Server 1000 Telephony Manager 3.0 Avaya Communication Server 1000 Telephony Manager 0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya CallPilot 0 Avaya Aura Conferencing 6.0 Standard |
| Not Vulnerable: | |
Discussion
Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability
Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the 'Win32k.sys' Windows kernel-mode driver.
A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a denial-of-service condition.
Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the 'Win32k.sys' Windows kernel-mode driver.
A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a denial-of-service condition.
Exploit / POC
Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability
The following proof-of-concept code is available:
The following proof-of-concept code is available:
Solution / Fix
Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
Microsoft Windows 7 for x64-based Systems 0
Microsoft Windows 7 for 32-bit Systems 0
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
Microsoft Windows 7 for x64-based Systems 0
-
Microsoft Windows6.1-KB2436673-x64.msu
http://www.microsoft.com/downloads/details.aspx?familyid=B21DB627-91C2 -4EBF-B7C0-38AC58AE5B6C
Microsoft Windows 7 for 32-bit Systems 0
-
Microsoft Windows6.1-KB2436673-x86.msu
http://www.microsoft.com/downloads/details.aspx?familyid=AA7DE2E4-BA48 -4D58-B034-05349F0EB920
References
Microsoft Windows CVE-2010-3944 'Win32k.sys' Local Privilege Escalation Vulnerability
References:
References: