CVE-2010-1891 Privilege escalation in n/a

What is CVE-2010-1891?

CVE-2010-1891 is a medium-severity vulnerability in Microsoft Windows Server 2003, published on 15 Sep 2010. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Elevation of Privilege Vulnerability."

Weakness: CWE-264

Which versions are affected by CVE-2010-1891?

It affects 2 products.

Products include Microsoft Windows Server 2003, Microsoft Windows Xp.

How do I fix CVE-2010-1891?

No fix has been published for CVE-2010-1891 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-1891 being exploited?

There is no known exploitation of CVE-2010-1891 in the wild and no public exploit code.

Other vulnerabilities in Microsoft Windows Server 2003

• CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Exploited High 7.8
• CVE-2013-3863 Memory corruption in n/a Critical 9.3
• CVE-2013-3181 Memory corruption in n/a Critical 9.3
• CVE-2013-0077 Code injection in n/a Critical 9.3
• CVE-2012-0009 Path traversal in n/a Critical 9.3

All Microsoft Windows Server 2003 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jhhf-m7pj-wvv6.