7.2
CVE-2010-3889
- EPSS 1.61%
- Veröffentlicht 08.10.2010 22:00:37
- Zuletzt bearbeitet 16.06.2026 23:23:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginUnspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.61% | 0.727 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml
http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29