CVE-2010-1734: Input Validation
Published May 5, 2010
·Updated
The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
Affected Software
55 affected components
Microsoft Windows 2003 Server=gold
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Microsoft Windows 2000=gold
Microsoft Windows XP=gold
Microsoft Windows XP=gold
Microsoft Windows XP=gold
Microsoft Windows XP=sp2
Microsoft Windows XP
Microsoft Windows XP=sp3-unknown
Microsoft Windows XP=sp3
Microsoft Windows XP=gold
Microsoft Windows XP=sp2
Microsoft Windows 2000=rc2
Microsoft Windows 2000=beta3
Microsoft Windows XP=gold
Microsoft Windows 2000=sp4
Microsoft Windows 2003 Server=r2
Microsoft Windows XP=sp3
Microsoft Windows XP=sp3
Microsoft Windows XP=gold
Microsoft Windows XP=sp1
Microsoft Windows Server 2003=sp1
Microsoft Windows XP=sp1
Microsoft Windows XP=sp1
Microsoft Windows 2000=sp2
Microsoft Windows XP=sp1
Microsoft Windows XP=gold
Microsoft Windows 2000=rc1
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
Microsoft Windows 2003 Server=gold
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
Microsoft Windows 2000=sp1
Microsoft Windows XP=sp2
Microsoft Windows 2003 Server=sp1
Microsoft Windows Server 2003=sp2
Microsoft Windows 2003 Server=gold
Microsoft Windows XP=sp3
Microsoft Windows XP=sp2
Microsoft Windows XP=gold
Microsoft Windows XP=sp1
Microsoft Windows XP=sp1
Microsoft Windows XP=sp3
Microsoft Windows 2003 Server=sp2
Microsoft Windows XP
Microsoft Windows 2003 Server=sp2
Microsoft Windows XP=gold
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Microsoft Windows 2000=sp3
Microsoft Windows 2000
Microsoft Windows 2000
Microsoft Windows Server 2003
Event History
May 5, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
May 6, 2010
Data Sourced
via NVD·12:47 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1734?
CVE-2010-1734 is classified as a denial of service vulnerability that can cause a system crash.
2
How do I fix CVE-2010-1734?
To address CVE-2010-1734, apply the latest security updates for affected versions of Microsoft Windows.
3
Which versions of Windows are affected by CVE-2010-1734?
CVE-2010-1734 affects Microsoft Windows 2000, XP, and Windows Server 2003.
4
What type of attack does CVE-2010-1734 enable?
CVE-2010-1734 enables local users to perform a denial of service attack through specific function calls.
5
Can CVE-2010-1734 be exploited remotely?
CVE-2010-1734 requires local access to the system for exploitation.