CVE-2010-1735: Input Validation
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1735?
CVE-2010-1735 has been classified as a denial of service vulnerability that can lead to system crashes.
How do I fix CVE-2010-1735?
To mitigate CVE-2010-1735, it is recommended to apply the latest security updates and patches provided by Microsoft for affected versions of Windows.
Which systems are affected by CVE-2010-1735?
CVE-2010-1735 affects Microsoft Windows 2000, Windows XP, and Windows Server 2003.
Can CVE-2010-1735 be exploited remotely?
CVE-2010-1735 is considered a local vulnerability, meaning it can only be exploited by a local user with access to the system.
What type of attack does CVE-2010-1735 represent?
CVE-2010-1735 represents a denial of service attack, which can cause the affected system to crash and become unresponsive.