http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx

[dailydave] 20100119 We hold these axioms to be self evident

http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip

20100119 Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack

38265

1023471

http://www.microsoft.com/technet/security/advisory/979682.mspx

37864

TA10-040A

ADV-2010-0179

MS10-015

ms-win-gptrap-privilege-escalation(55742)

oval:org.mitre.oval:def:8344

The remote Windows host is running a version of the Windows kernel that is affected by two vulnerabilities :

  - An elevation of privilege vulnerability exists in the     kernel due to the way it handles certain exceptions. An     attacker who successfully exploited this vulnerability     could run arbitrary code in kernel mode. An attacker     could then install programs, view / change / delete     data, or create new accounts with full user rights.
    (CVE-2010-0232)

  - An elevation of privilege vulnerability exists in the     Windows kernel due to a double free condition. An     attacker who successfully exploited this vulnerability     could run arbitrary code in kernel mode. An attacker     could then install programs, view / change / delete     data, or create new accounts with full user rights.
    (CVE-2010-0233)

CVE-2010-0232

high

Tenable Plugins

high