CVE-2010-1734
The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
- Score
- CVSS 2.0 4.9 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2010-05-06
- Last modified
- 2024-08-07
- Weaknesses
- CWE-20
Affected products
- Windows 2000 (Microsoft)
- Windows 2003 Server (Microsoft)
- Windows Server 2003 (Microsoft)
- Windows Xp (Microsoft)
References
- http://secunia.com/advisories/39456
- http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607
- http://www.securityfocus.com/archive/1/510886/100/0/threaded
- http://www.securityfocus.com/bid/39631
