7.2
CVSSv2

CVE-2010-1889

Published: 11/08/2010 Updated: 07/12/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows server 2008

microsoft windows server 2008 -

microsoft windows vista -

microsoft windows vista

Exploits

Microsoft Windows KTM Invalid Free with reused transaction GUID ---------------------------------------------------------------------------- CVE-2010-1889 The Kernel Transaction Manager (ktm) was introduced in Windows Vista and has been included in subsequent versions of Windows Microsoft describes the feature in this MSDN article: msdn ...
Microsoft Windows suffers from a KTM invalid free with reused transaction GUID vulnerability Proof of concept code included ...