QwikSec

Security Database

CVE

CWE

Training

CVE-2010-4398

Published: Dec 3, 2010

Modified: Oct 22, 2025

PUBLISHED

Description

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://isc.sans.edu/diary.html?storyid=9988

x_refsource_MISC

vdb-entry

x_refsource_BID

exploit

x_refsource_EXPLOIT-DB

http://nakedsecurity.sophos.com/2010/11/25/new-windows-zero-day-flaw-bypasses-uac/

x_refsource_MISC

http://support.avaya.com/css/P8/documents/100127248

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/

x_refsource_MISC

http://twitter.com/msftsecresponse/statuses/7590788200402945

x_refsource_MISC

vendor-advisory

x_refsource_MS

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_CERT-VN

third-party-advisory

x_refsource_SECUNIA

oval:org.mitre.oval:def:12162

vdb-entry

signature

x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.