CVE-2010-2729

The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and…

published September 15, 2010

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
76%
Percentile
99.5
In the wild
Unconfirmed
What it is

⚠️ When printer sharing is on, this vulnerability lets attackers send a crafted print request and gain access they shouldn’t! 😱 Think of the Print Spooler service as a restaurant's kitchen, where a waiter (the attacker) can sneak in an order that wasn't approved — serving up anything they want without the chef's consent! 🍽️ This flaw allows a remote attacker to create files in system directories and execute arbitrary code, potentially seizing control of the entire system. A successful exploit could lead to unauthorized access, data breaches, or even system corruption. Yikes!

Put simply

Think of the Print Spooler service as a restaurant's kitchen, where a waiter (the attacker) can sneak in an order that wasn't approved — serving up anything they want without the chef's consent! 🍽️ The Print Spooler service in older Windows versions fails to properly validate access permissions, enabling attackers to exploit this oversight via crafted print requests sent over RPC, thereby executing arbitrary code.

What to do

This flaw allows a remote attacker to create files in system directories and execute arbitrary code, potentially seizing control of the entire system. A successful exploit could lead to unauthorized access, data breaches, or even system corruption. Yikes! To mitigate this risk, ensure that printer sharing is disabled unless absolutely necessary. Additionally, consider applying relevant patches and keeping your systems updated to the latest supported versions. 🛡️ You've got this! Stay vigilant and follow these steps to keep your systems secure! 🔒

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.75636 · 99.5th percentile
Published
2010-09-15T18:00Z
EPSS history
Timeline
  • 15 SEP 18:00Z
    The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and…
    cvelistv5