VulnerabilityModified
CVE-2010-0719
An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
MEDIUM 4.7EPSS 1.72%
Does this matter?
Lower severity and a low EPSS score (1.72%). Track it; it rarely justifies an emergency change on its own.
Description
An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
- CVSS 2.0
- 4.7 MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 1.72% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- microsoft/windows 2000 · microsoft/windows 2003 server · microsoft/windows 7 · microsoft/windows server 2008 · microsoft/windows vista · microsoft/windows xp
- Source
- cve@mitre.org
References
- http://osvdb.org/62660
- http://securitytracker.com/id?1023656
- http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56591
- http://osvdb.org/62660
- http://securitytracker.com/id?1023656
- http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56591
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.