{ "schema_version": "1.4.0", "id": "GHSA-862j-jx76-43wv", "modified": "2022-05-14T01:31:53Z", "published": "2022-05-14T01:31:53Z", "aliases": [ "CVE-2010-3942" ], "details": "win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka \"Win32k WriteAV Vulnerability.\"", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3942" }, { "type": "WEB", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11762" }, { "type": "WEB", "url": "http://www.securitytracker.com/id?1024880" }, { "type": "WEB", "url": "http://www.us-cert.gov/cas/techalerts/TA10-348A.html" } ], "database_specific": { "cwe_ids": [ "CWE-119" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-12-16T19:33:00Z" } }