H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2010-4398

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

Vulnerability
TypeVulnerability
External ID—
First seen2022-03-28
Last seen2022-03-28

Confidence

—

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

Labels

exploitedkev

CISA KEV context

Vendor / productMicrosoft Windows
Added2022-03-28
Due date2022-04-21
13 recorded

Relationships

mitigates
from Remediate CVE-2010-4398
Mitigation
related-to
to Buffer Manipulation
Technique
related-to
to Buffer Overflow in an API Call
Technique
related-to
to Buffer Overflow in Local Command-Line Utilities
Technique
related-to
to Buffer Overflow via Environment Variables
Technique
related-to
to Buffer Overflow via Parameter Expansion
Technique
related-to
to Buffer Overflow via Symbolic Links
Technique
related-to
to Client-side Injection-induced Buffer Overflow
Technique
related-to
to Filter Failure through Buffer Overflow
Technique
related-to
to MIME Conversion
Technique
related-to
to Overflow Binary Resource File
Technique
related-to
to Overflow Buffers
Technique
related-to
to Overflow Variables and Tags
Technique
2 external

References

nvd
CVE-2010-4398
open
cwe
CWE-119
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance