CVE-2008-1453

2008-06-1202:32:00

CWE-20

[email protected]

web.nvd.nist.gov

microsoft

windows

bluetooth

code execution

service discovery protocol

nvd

cve-2008-1453

security vulnerability

7.2 High

AI Score

Confidence

Low

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.6%

JSON

The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets.

CPENameOperatorVersion
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows-ntmicrosoft windows-nteqxp
microsoft:windows_vistamicrosoft windows vistaeq*