CVE-2010-1734: Microsoft Windows 2000

Medium severity, CVSS 4.9. EPSS: 2.7% chance of exploitation in the next 30 days.

The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.

Affected products

• Microsoft Windows 2000: any version; affected versions not specified
• Microsoft Windows 2003 Server: any version
• Microsoft Windows Server 2003: any version
• Microsoft Windows XP: any version; affected versions not specified; version sp3 only

Published 2010-05-06. Last modified 2026-06-16.