CVE-2010-0484: Input Validation
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0484?
CVE-2010-0484 has a medium severity level as it allows local users to execute arbitrary code.
How do I fix CVE-2010-0484?
To fix CVE-2010-0484, apply the latest security updates provided by Microsoft for the affected Windows versions.
Which Windows versions are affected by CVE-2010-0484?
CVE-2010-0484 affects Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008.
What causes the vulnerability CVE-2010-0484?
CVE-2010-0484 is caused by improper validation of changes in certain kernel objects by the Windows kernel-mode drivers.
Is remote code execution possible with CVE-2010-0484?
No, CVE-2010-0484 allows only local users to execute arbitrary code, not remote execution.