VULNERABILITY INTELLIGENCE

CVE-2010-0235

CVSS score4.7 MEDIUM
EPSS probability1.71%
CISA KEVNot currently listed
Published2010-04-14
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references