Lucene search

K
cve[email protected]CVE-2008-0020
HistoryJul 07, 2009 - 11:30 p.m.

CVE-2008-0020

2009-07-0723:30:00
CWE-94
web.nvd.nist.gov
52
cve-2008-0020
unspecified vulnerability
load method
ipersiststreaminit
active template library
atl
microsoft video activex control
msvidctl.dll
directshow
microsoft windows
remote attackers
arbitrary code
memory corruption
atl header memcopy vulnerability

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka “ATL Header Memcopy Vulnerability,” a different vulnerability than CVE-2008-0015.

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%