CVE-2010-0237: Medium severity Microsoft Windows 2000 vulnerability
Published Apr 14, 2010
·Updated
The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
Affected Software
3 affected components
Microsoft Windows 2000=sp4
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Event History
Apr 14, 2010
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
Description
Data Sourced
via NVD·04:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0237?
CVE-2010-0237 is considered a critical vulnerability that allows local users to gain elevated privileges.
2
How do I fix CVE-2010-0237?
To fix CVE-2010-0237, apply the latest security updates provided by Microsoft for affected versions.
3
What versions of Windows are affected by CVE-2010-0237?
CVE-2010-0237 affects Microsoft Windows 2000 SP4 and Windows XP SP2 and SP3.
4
What type of attack can exploit CVE-2010-0237?
CVE-2010-0237 can be exploited by local attackers creating symbolic links to manipulate trusted registry hives.
5
Is CVE-2010-0237 a hardware or software vulnerability?
CVE-2010-0237 is a software vulnerability affecting the Windows kernel.