Oval Definition:oval:org.mitre.oval:def:12184
Revision Date:2012-03-26Version:47
Title:Win32k Memory Corruption Vulnerability
Description:win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3944
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Product(s):
Definition Synopsis
  • OR
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND GDR or LDR Service branch
  • the version of win32k.sys is less than 6.1.7600.16691
  • OR LDR
  • the version of win32k.sys is less than 6.1.7600.20821
  • AND the version of win32k.sys is greater than or equal to 6.1.7600.20000
    • BACK