CVE-2010-2744

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly manage a window class, which allows local users to gain privileges by creating a window, then using (1) the SetWindowLongPtr function to modify the popup menu structure, or (2) the SwitchWndProc function with a switch window information pointer, which is not re-initialized when a WM_NCCREATE message is processed, aka "Win32k Window Class Vulnerability."

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

4.19% chance of exploitation in the next 30 days, 90th percentile

Published

2010-10-13

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15894

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15894

References

• CVE Record
• NVD entry

Related

• CVE-2010-2743
• CVE-2010-2745
• CVE-2010-2739
• CVE-2010-2746
• CVE-2010-2738
• CVE-2010-2752