Lucene search
MicrosoftCVELIST:CVE-2008-1457HistoryAug 13, 2008 - 10:00 a.m.
CVE-2008-1457
2008-08-1310:00:00
microsoft
www.cve.org
The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
References
marc.info/?l=bugtraq&m=121915960406986&w=2
secunia.com/advisories/31417
www.securityfocus.com/bid/30584
www.securitytracker.com/id?1020677
www.us-cert.gov/cas/techalerts/TA08-225A.html
www.vupen.com/english/advisories/2008/2353
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6095
Related
canvas
canvas
Immunity Canvas: MS08_049
2008-08-13 12:42:00
seebug
seebug
nvd
nvd
CVE-2008-1457
2008-08-13 12:42:00
cve
cve
CVE-2008-1457
2008-08-13 12:42:00
prion
prion
Cross site request forgery (csrf)
2008-08-13 12:42:00
nessus
nessus
openvas
openvas
Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
2008-08-19 00:00:00
Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
2008-08-19 00:00:00
securityvulns
securityvulns