Security Advisory

CVE-2010-1895

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-08-11 18:00:00

Last updated 2024-08-07 02:17:13

Assigner microsoft

CVSS score not scored

State PUBLISHED

Description

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability."

← Browse all CVEs View on cve.org ↗