CVE-2010-3959

Microsoft Windows - Local Privilege Escalation via OpenType CMAP Table

Title source: llm

Description

The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."

References (4)

Core 4

Core References

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA10-348A.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1024873

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12280

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-091

Scores

EPSS 0.1436

EPSS Percentile 96.2%

Details

CWE

CWE-94

Status published

Products (6)

microsoft/windows_2003_server (2 CPE variants)

microsoft/windows_7 (2 CPE variants)

microsoft/windows_server_2003

microsoft/windows_server_2008 (8 CPE variants)

microsoft/windows_vista (3 CPE variants)

microsoft/windows_xp (2 CPE variants)

Published Dec 16, 2010

Tracked Since Feb 18, 2026