CVE-2010-2549 in Windows
Summary
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/30/2010
Disclosure
07/02/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4151 | Microsoft Windows NtUserCheckAccessForIntegrityLevel resource management | 399 | Proof-of-Concept | Official fix | CVE-2010-2549 |