VULNERABILITY INTELLIGENCE

CVE-2010-2555

CVSS score6.8 MEDIUM
EPSS probability1.64%
CISA KEVNot currently listed
Published2010-08-11
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:C/I:C/A:C

Description

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."

Primary references