4.7
CVE-2010-0481
- EPSS 1.64%
- Veröffentlicht 14.04.2010 16:00:01
- Zuletzt bearbeitet 16.06.2026 23:16:15
- Erkennungen
LoginThe kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows Server 2008 Edition itanium
Microsoft ≫ Windows Server 2008 Edition x64
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition x86
Microsoft ≫ Windows Vista Edition x64
Microsoft ≫ Windows Vista Update sp1
Microsoft ≫ Windows Vista Update sp2
Microsoft ≫ Windows Vista Version - Update sp1
Microsoft ≫ Windows Vista Version - Update sp2
Microsoft ≫ Windows Server 2008 Update r2 Edition itanium
Microsoft ≫ Windows Server 2008 Update r2 Edition x64
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.64% | 0.732 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.7 | 3.4 | 6.9 |
AV:L/AC:M/Au:N/C:N/I:N/A:C
|
| CISA-ADP | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
http://www.us-cert.gov/cas/techalerts/TA10-103A.html
http://secunia.com/advisories/39373
http://secunia.com/advisories/39374
http://www.securitytracker.com/id?1023850
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6770