CVE-2010-3889observed exploitation

CVE-2010-3889

Published · Updated

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 1.6%
from disclosure to weapon
Published on NVDOct 8
VulnCheckOct 8
exploitation probability
1.6%top 25% of all CVEs
observed exploitation
yesVulnCheck
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
Affected products
n/a · n/a
References
http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilitieshttp://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xmlhttp://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml