VULNERABILITY INTELLIGENCE

CVE-2010-1735

CVSS score4.9 MEDIUM
EPSS probability2.49%
CISA KEVNot currently listed
Published2010-05-06
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references