Microsoft · Windows
CVE-2010-4398
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
O que é
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
CISA: Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 21 de abril de 2022
- Adicionada à lista da CISA
- 28 de março de 2022
- Publicada
- 3 de dezembro de 2010
- Gravidade
- Alto 7,8 CVSS 3.1
- Chance de ataques nos próximos 30 dias (EPSS)
- 8,7% entre os 4,9% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-119
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (13)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-011
- http://isc.sans.edu/diary.html?storyid=9988
- http://www.securityfocus.com/bid/45045
- http://www.exploit-db.com/exploits/15609/
- http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac/
- http://support.avaya.com/css/P8/documents/100127248
- http://www.vupen.com/english/advisories/2011/0324
- http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/
- http://twitter.com/msftsecresponse/statuses/7590788200402945
- http://www.securitytracker.com/id?1025046
- http://www.kb.cert.org/vuls/id/529673
- http://secunia.com/advisories/42356
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12162
Mais falhas exploradas de Microsoft
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 13 de out. de 2026 | Command Injection | Windows | Alto 8,8 | 9,8% |
| 8 de set. de 2026 | Link Following | Windows | Alto 7,8 | 0,4% |
| 8 de set. de 2026 | Heap-Based Buffer Overflow | Windows | Alto 7,8 | 0,4% |
| 20 de mai. de 2026 | Buffer Overflow | Windows | Crítica 9,8 | 99% |
| 28 de abr. de 2026 | Protection Mechanism Failure | Windows | Média 4,3 | 71% |
| 13 de abr. de 2026 | Out-of-Bounds Read | Windows | Alto 7,8 | 12% |
| 13 de abr. de 2026 | Link Following | Windows | Alto 7,8 | 4,6% |
| 17 de fev. de 2026 | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | Alto 8,8 | 77% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.