← Database

CVE-2010-2555

MEDIUM CVSS: 6.8 Published: 2010-08-11 Modified: 2026-06-16

Description

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."

Affected Platforms

Microsoft Windows Server 2008Microsoft Windows 7Microsoft Windows Vista

Weakness Type

CWE-264

References