CVE-2010-0719

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-02-26 · updated 2026-06-16
Weakness: CWE-20

Description

An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: all versions
Microsoft Windows 7: all versions
Microsoft Windows Server 2008: all versions
Microsoft Windows Vista: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://osvdb.org/62660
http://securitytracker.com/id?1023656
http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/
https://exchange.xforce.ibmcloud.com/vulnerabilities/56591
http://osvdb.org/62660
http://securitytracker.com/id?1023656
http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/
https://exchange.xforce.ibmcloud.com/vulnerabilities/56591

Get alerted when CVE-2010-0719 or the next vulnerability affects your stack