CVE-2010-1735
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
06/05/2010
Last modified:
07/07/2021
Description
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
Impact
Base Score 2.0
4.90
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:microsoft:windows_2000:*:-:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:beta3:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:gold:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:rc1:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:rc2:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:*:gold:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:*:gold:itanium:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page