CVE-2008-1440

🗓️ 12 Jun 2008 01:30:00Reported by microsoftType

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet

Reporter	Title	Published	Views	Family All 11
Check Point Advisories	Microsoft Windows PGM Packet Handling Denial of Service (MS08-036; CVE-2008-1440)	11 Jun 200800:00	–	checkpoint_advisories
CVE	CVE-2008-1440	12 Jun 200801:30	–	cve
NVD	CVE-2008-1440	12 Jun 200802:32	–	nvd
OpenVAS	Microsoft Pragmatic General Multicast (PGM) DoS Vulnerability (950762)	10 Jan 201100:00	–	openvas
OpenVAS	Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability (950762)	10 Jan 201100:00	–	openvas
Prion	Security feature bypass	12 Jun 200802:32	–	prion
Positive Technologies	PT-2008-3012 · Microsoft · Windows Xp +1	12 Jun 200800:00	–	ptsecurity
securityvulns	Microsoft Security Bulletin MS08-036 – Important Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)	14 Jun 200800:00	–	securityvulns
securityvulns	Microsoft Windows PGM DoS	14 Jun 200800:00	–	securityvulns
Tenable Nessus	MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)	10 Jun 200800:00	–	nessus

Source	Link
vupen	www.vupen.com/english/advisories/2008/1783
securityfocus	www.securityfocus.com/bid/29508
securitytracker	www.securitytracker.com/id
us-cert	www.us-cert.gov/cas/techalerts/TA08-162B.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036
secunia	www.secunia.com/advisories/30587
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5473

12 Oct 2018 19:57Current

6.3Medium risk

Vulners AI Score6.3

EPSS0.50592