GCVE-110-CERTCC-2010-529673

Advisory Published

Vulnetix · Advisory published November 24, 2010

Microsoft Windows does not adequately validate registry data read using the function RtlQueryRegistryValues(). By modifying an EUDC registry key value, a local user could execute arbitrary code with SYSTEM privileges.

Download JSON Open in Console

Risk Scores

certcc-cam

impact20population17exploitation0widely_known20score_current15.9375ease_of_exploitation10

certcc-vrda

d1_impact3d1_population4d1_direct_report0

References

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

url

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

url

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

url

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

url

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

advisory

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

exploit

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

sighting

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON