Security Advisory
CVE-2010-3944
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."