Skip to main content
← All vulnerabilities
CVE-2010-1734

The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.

Timeline

  1. Public exploit on Exploit-DB

    EDB-12337

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 5

securityfocus.com

secunia.com

vigilance.fr

Exploit-DB