Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-1457
HistoryAug 13, 2008 - 12:42 p.m.

CVE-2008-1457

2008-08-1312:42:00
CWE-20
[email protected]
web.nvd.nist.gov

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.291 Low

EPSS

Percentile

96.9%

JSON

The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.

Affected configurations

NVD
Node
microsoftwindows-ntMatch2008
OR
microsoftwindows-ntMatchvistagold
OR
microsoftwindows-ntMatchxpsp3
OR
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serversp1
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_xpsp2

Related

canvas 1
seebug 1
cvelist 1
cve 1
prion 1
openvas 2
securityvulns 2
nessus 1
canvas
canvas
Immunity Canvas: MS08_049
2008-08-13 12:42:00
seebug
seebug
Microsoft Windowsไบ‹ไปถ็ณป็ปŸ็”จๆˆท่ฎข้˜…่ฏทๆฑ‚ๆƒ้™ๆๅ‡ๆผๆดž๏ผˆMS08-049๏ผ‰
2008-08-15 00:00:00
cvelist
cvelist
CVE-2008-1457
2008-08-13 10:00:00
cve
cve
CVE-2008-1457
2008-08-13 12:42:00
prion
prion
Cross site request forgery (csrf)
2008-08-13 12:42:00
openvas
openvas
Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
2008-08-19 00:00:00
Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
2008-08-19 00:00:00
securityvulns
securityvulns
Microsoft Windows privilege escalation
2008-08-12 00:00:00
Microsoft Security Bulletin MS08-049 โ€“ Important Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
2008-08-12 00:00:00
nessus
nessus
MS08-049: Vulnerabilities in Event System Could Allow Remote Code Execution (950974)
2008-08-13 00:00:00

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.291 Low

EPSS

Percentile

96.9%

JSON
Related for NVD:CVE-2008-1457
canvas1seebug1cvelist1cve1prion1openvas2securityvulns2nessus1