What is CVE-2010-2743?

CVE-2010-2743 is a vulnerability in Microsoft Windows 2003 Server. Published 2011-01-20.

Is CVE-2010-2743 known to be exploited?

7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Windows 2003 Server

CVE-2010-2743

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, aka "Win32k Keyboard Layout Vulnerability." NOTE: this might be a duplicate of CVE-2010-3888 or CVE-2010-3889.

EPSS: 0.148 (96.3th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secure@microsoft.com (x_refsource_MS, vendor-advisory)

Frequently asked questions

What is CVE-2010-2743?: CVE-2010-2743 is a vulnerability in Microsoft Windows 2003 Server. Published 2011-01-20.
Is CVE-2010-2743 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.