製品・ソフトウェアに関する情報

JVN脆弱性詳細

Microsoft Windows の kernel における権限昇格の脆弱性

Title	Microsoft Windows の kernel における権限昇格の脆弱性
Summary	Microsoft Windows の kernel には、32-bit x86 のプラットフォーム上で 16-bit アプリケーションへのアクセスが可能な場合、特定の BIOS コールの処理に不備があるため、権限を取得される脆弱性が存在します。
Possible impacts	ローカルユーザにより、Thread Environment Block の VDM_TIB のデータ構造を巧妙に細工されると #GP トラップハンドラが適切に処理されないため、権限を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 20, 2010, midnight
Registration Date	Feb. 22, 2010, 12:12 p.m.
Last Update	Feb. 22, 2010, 12:12 p.m.

Affected System

マイクロソフト

Microsoft Windows 2000

Microsoft Windows 7 (x32)

Microsoft Windows Server 2003

Microsoft Windows Server 2008 (x86)

Microsoft Windows Vista

Microsoft Windows XP sp3

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-0232	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0232
National Vulnerability Database (NVD)
2	CVE-2010-0232	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0232

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Microsoft Security Advisory
1	979682	http://www.microsoft.com/technet/security/advisory/979682.mspx
Microsoft Security Bulletin
2	MS10-015	http://www.microsoft.com/technet/security/Bulletin/MS10-015.mspx
マイクロソフトセキュリティアドバイザリ
3	979682	http://www.microsoft.com/japan/technet/security/advisory/979682.mspx
マイクロソフトセキュリティ情報
4	MS10-015	http://www.microsoft.com/japan/technet/security/bulletin/ms10-015.mspx
絵でみるセキュリティ情報
5	MS10-015e	http://www.microsoft.com/japan/security/bulletins/MS10-015e.mspx

その他

No	Name	URL
ISS X-Force Database
1	55742	http://xforce.iss.net/xforce/xfdb/55742
JPCERT 緊急報告
2	JPCERT-AT-2010-0006	http://www.jpcert.or.jp/at/2010/at100006.txt
JVN
3	JVNTA10-040A	http://jvn.jp/cert/JVNTA10-040A/
JVN Status Tracking Notes
4	JVNTR-2010-05	http://jvn.jp/tr/JVNTR-2010-05/
Secunia Advisory
5	SA38265	http://secunia.com/advisories/38265/
SecurityFocus
6	37864	http://www.securityfocus.com/bid/37864
SecurityTracker
7	1023471	http://securitytracker.com/id?1023471
US-CERT Cyber Security Alerts
8	SA10-040A	http://www.us-cert.gov/cas/alerts/SA10-040A.html
US-CERT Technical Cyber Security Alert
9	TA10-040A	http://www.us-cert.gov/cas/techalerts/TA10-040A.html
VUPEN Security
10	VUPEN/ADV-2010-0179	http://www.vupen.com/english/advisories/2010/0179
警察庁 @police
11	マイクロソフト社のセキュリティ修正プログラムについて(MS10-003,004,005,006,007,008,009,010,011,012,013,014,015)	http://www.npa.go.jp/cyberpolice/#topics

Change Log

No	Changed Details	Date of change
0	[2010年02月22日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-0232

Summary	The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."
Publication Date	Jan. 22, 2010, 4:30 a.m.
Registration Date	Jan. 29, 2021, 10:56 a.m.
Last Update	July 24, 2024, 11:30 p.m.

Affected software configurations

Related information, measures and tools

No	URL	refsource	タグ
1	http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx	CONFIRM	Broken Link
2	http://lists.immunitysec.com/pipermail/dailydave/2010-January/006000.html	MLIST	Broken Link
3	http://www.securityfocus.com/bid/37864	BID	Broken Link Exploit Third Party Advisory VDB Entry
4	http://seclists.org/fulldisclosure/2010/Jan/341	FULLDISC	Exploit Mailing List Third Party Advisory
5	http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip	MISC	Broken Link Exploit
6	http://www.vupen.com/english/advisories/2010/0179	VUPEN	Broken Link Vendor Advisory
7	http://secunia.com/advisories/38265	SECUNIA	Broken Link Vendor Advisory
8	http://www.microsoft.com/technet/security/advisory/979682.mspx	CONFIRM	Broken Link Patch Vendor Advisory
9	http://securitytracker.com/id?1023471	SECTRACK	Broken Link Third Party Advisory VDB Entry
10	http://www.us-cert.gov/cas/techalerts/TA10-040A.html	CERT	Third Party Advisory US Government Resource
11	https://exchange.xforce.ibmcloud.com/vulnerabilities/55742	XF	Broken Link Third Party Advisory VDB Entry
12	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8344	OVAL	Broken Link
13	http://www.securityfocus.com/archive/1/509106/100/0/threaded	BUGTRAQ	Broken Link Third Party Advisory VDB Entry
14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015	MS	Patch Vendor Advisory

Common Vulnerabilities List