###  CVE-2010-2554

#### Describe

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability

#### ImpactVersion

| Product             | CPU Architecture | Version | Update | Tested |
| ------------------- | ---------------- | ------- | ------ | ------ |
| Windows 7           |                  |         |        |        |
| Windows Server 2008 |                  | SP2     |        |        |
| Windows Server 2008 |                  | R2      |        |        |
| Windows Server 2008 |                  |         |        |        |
| Windows Vista       |                  |         | SP1    |        |
| Windows Vista       |                  |         | SP2    |        |

#### Patch

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2010-2554
```

#### Utilization

The vulnerability does not test, the root directory is stored in the network collection **[CVE number] .zip** EXP or POC, code status unknown

#### ProjectSource

-  None
