CVE-2010-2566 in Windows

Resumen (Inglés)

The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability."

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2010-06-30

Divulgación

2010-08-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
54342	Microsoft Windows escalada de privilegios	20	No está definido	No está definido	CVE-2010-2566

Fuentes

• MITRE
• NVD
• CVE Details