Unscored CVE-2010-3961 EUVD-2010-3938GHSA-gwxq-9r35-f7xv

The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not prope…

Published Dec 16, 2010 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."

References

42614 third-party-advisory
TA10-348A third-party-advisory
oval:org.mitre.oval:def:12323 vdb-entry signature
ADV-2010-3222 vdb-entry
1024882 vdb-entry
45318 vdb-entry
MS10-100 vendor-advisory
69824 vdb-entry