CVE-2010-2549

EPSS 5.1%

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/14156unverified exploitdbwww.exploit-db.com/exploits/14156unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/66003 http://seclists.org/fulldisclosure/2010/Jul/3 http://secunia.com/advisories/40421 https://exchange.xforce.ibmcloud.com/vulnerabilities/60120 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12215 http://www.exploit-db.com/exploits/14156 http://www.securityfocus.com/bid/41280 http://www.us-cert.gov/cas/techalerts/TA10-285A.html