Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2010-3942: Windows kernel driver may let local users gain admin rights

CVE-2010-3942 · published 15 years ago

Summary

The win32k.sys driver in several Windows versions can mishandle memory, allowing a locally‑run program to increase its privileges. This could let an ordinary user obtain higher access on the system. Apply the latest security updates from Microsoft to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
microsoft	windows_2003_server	All versions `cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*`
microsoft	windows_7	All versions `cpe:2.3:o:microsoft:windows_7::::::::`
microsoft	windows_server_2003	All versions `cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*`
microsoft	windows_server_2008	All versions `cpe:2.3:o:microsoft:windows_server_2008:::itanium:::::*`
microsoft	windows_vista	All versions `cpe:2.3:o:microsoft:windows_vista::sp1::::::*`
microsoft	windows_xp	All versions `cpe:2.3:o:microsoft:windows_xp::sp3::::::*`

Original advisory text

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.2 High

Exploitation

2% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published16 Dec 2010

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2010-3942 · NVD

Track software like this

Free during beta