Vulnerabilities > CVE-2010-3888 - Unspecified vulnerability in Microsoft Windows
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 |
Exploit-Db
description Windows Task Scheduler - Privilege Escalation (0day). CVE-2010-3338,CVE-2010-3888. Local exploit for windows platform id EDB-ID:15589 last seen 2016-02-01 modified 2010-11-20 published 2010-11-20 reporter webDEViL source https://www.exploit-db.com/download/15589/ title Windows Task Scheduler - Privilege Escalation 0day description Windows Escalate Task Scheduler XML Privilege Escalation. CVE-2010-3338,CVE-2010-3888. Local exploit for windows platform id EDB-ID:19930 last seen 2016-02-02 modified 2012-07-19 published 2012-07-19 reporter metasploit source https://www.exploit-db.com/download/19930/ title Windows Escalate Task Scheduler XML Privilege Escalation
References
- http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
- http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716
- http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
- http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
- http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
- http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml