7.2
CVSSv2

CVE-2010-2743

Published: 20/01/2011 Updated: 07/12/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows server 2008

microsoft windows server 2008 -

microsoft windows xp -

microsoft windows 7 -

microsoft windows vista -

microsoft windows xp

microsoft windows 7

microsoft windows vista

microsoft windows server 2003

microsoft windows 2003 server

Exploits

// My koala is staring at you CºgºD // Source: reversemodecom/indexphp?option=com_content&task=view&id=71&Itemid=1 #include <windowsh> #include <stdioh> #include <ntsecapih> #define MAGIC_OFFSET 0x6261 #define InitializeUnicodeStr(p,s) { \ (p)->Length= wcslen(s)*2; \ (p)->MaximumL ...
Demonstration code for the Win32k Keyboard Layout vulnerability as described in MS10-073 ...