CVE-2010-2739

Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by performing a clipboard operation (GetClipboardData API function) with a crafted bitmap with a palette that contains a large number of colors.

• CWE-119

• http://blogs.technet.com/b/msrc/archive/2010/08/10/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability.aspxVendor Advisory
• http://secunia.com/advisories/40870Vendor Advisory
• http://www.ragestorm.net/blogs/?p=255Exploit
• http://www.vupen.com/english/advisories/2010/2029Vendor Advisory
• https://msrc.microsoft.com/blog/2010/08/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability/
• http://blogs.technet.com/b/msrc/archive/2010/08/10/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability.aspxVendor Advisory
• http://secunia.com/advisories/40870Vendor Advisory
• http://www.ragestorm.net/blogs/?p=255Exploit
• http://www.vupen.com/english/advisories/2010/2029Vendor Advisory
• https://msrc.microsoft.com/blog/2010/08/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability/

Published

Sep 7, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2733Cross-site scripting (XSS) vulnerability in the Web Monitor …
• CVE-2010-2734Cross-site scripting (XSS) vulnerability in the mobile porta…
• CVE-2010-2735Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-2736Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-2737Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-2738The Uniscribe (aka new Unicode Script Processor) implementat…
• CVE-2010-2740The OpenType Font (OTF) format driver in Microsoft Windows X…
• CVE-2010-2741The OpenType Font (OTF) format driver in Microsoft Windows X…
• CVE-2010-2742The Netlogon RPC Service in Microsoft Windows Server 2003 SP…
• CVE-2010-2743The kernel-mode drivers in Microsoft Windows XP SP3 do not p…
• CVE-2010-2744The kernel-mode drivers in Microsoft Windows XP SP2 and SP3,…
• CVE-2010-2745Microsoft Windows Media Player (WMP) 9 through 12 does not p…