CVE-2010-1735

The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 84.36%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_2000
*
microsoftwindows_2000
-
microsoftwindows_2003_server
*
microsoftwindows_server_2003
*
microsoftwindows_xp
*
microsoftwindows_xp
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/39456
http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607
http://www.securityfocus.com/archive/1/510884/100/0/threaded
http://www.securityfocus.com/bid/39630
http://secunia.com/advisories/39456
http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607
http://www.securityfocus.com/archive/1/510884/100/0/threaded
http://www.securityfocus.com/bid/39630