Windows Kernel 'win32k.sys' Lets Local Users Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1024072 |
|
SecurityTracker URL: http://securitytracker.com/id/1024072
|
|
CVE Reference:
CVE-2010-0484, CVE-2010-0485, CVE-2010-1255
(Links to External Site)
|
Date: Jun 8 2010
|
Impact:
Root access via local system, User access via local system
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2000 SP4, 2003 SP2, XP SP3, Vista SP2, 2008 SP2, 2008 R2, 7; and prior service packs
|
Description:
Several vulnerabilities were reported in the Windows Kernel. A local user can obtain elevated privileges on the target system.
The 'win32k.sys' driver does not properly validate changes in certain kernel objects [CVE-2010-0484]. A local user can execute arbitrary code on the target system with elevated privileges. Sebastien Renaud of VUPEN Vulnerability Research Team reported this vulnerability.
The 'win32k.sys' driver does not properly validate parameters when creating new windows [CVE-2010-0485]. A local user can execute arbitrary code on the target system with elevated privileges.
The 'win32k.sys' driver does not properly provide glyph outline information to applications [CVE-2010-1255]. A local user can execute arbitrary code on the target system with elevated privileges. Secunia Research reported this vulnerability.
|
Impact:
A local user can obtain elevated privileges on the target system.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows 2000 Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?familyid=60C8579B-1540-40D8-80A0-956EDADD63CE
Windows XP Service Pack 2 and Windows XP Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?familyid=023A777A-3D83-4A4E-8029-DA8B095B074B
Windows XP Professional x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=8E3AAC9D-7747-435F-9678-F621E314E070
Windows Server 2003 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=79A11DCD-5D88-4D83-BEAE-6580EF6FC2C0
Windows Server 2003 x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=F42CC5D4-1BEA-4A4A-8A08-B3EB92503588
Windows Server 2003 with SP2 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?familyid=50EFB1CF-9D89-4522-929D-F87FD98D6FE8
Windows Vista Service Pack 1 and Windows Vista Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=7CB64633-D2A0-4E38-BE35-EC32EA655A04
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=BBFC4D80-67EB-4DEB-9595-CB67942A0DF2
Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=22D550FE-BA35-4750-A9D6-624858B67C94
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=09025626-4116-4A31-8700-215382898EE2
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=0035CFE2-D38D-41CD-B704-EC1FEDA307D8
Windows 7 for 32-bit Systems:
http://www.microsoft.com/downloads/details.aspx?familyid=3E0FF389-4612-4C92-BBFF-BB45B5BDFC6A
Windows 7 for x64-based Systems:
http://www.microsoft.com/downloads/details.aspx?familyid=2B1E4AFF-605A-4E94-88F9-135CE35F0646
Windows Server 2008 R2 for x64-based Systems:
http://www.microsoft.com/downloads/details.aspx?familyid=4272277F-B2DD-4406-8BBD-BC461C9923B8
Windows Server 2008 R2 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?familyid=7D636F82-E828-468C-AC36-808FF9D37C7F
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms10-032.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms10-032.mspx (Links to External Site)
|
Cause:
Access control error, Input validation error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 08 Jun 2010 18:03:51 +0000
Subject: http://www.microsoft.com/technet/security/bulletin/ms10-032.mspx
|
Microsoft Security Bulletin MS10-032 - Important: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (979559)
CVE-2010-0484
CVE-2010-0485
CVE-2010-1255
|
|
