PRIOn knowledge basePRION:CVE-2008-4834Remote code execution
8.7 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.905 High
EPSS
Percentile
98.7%
Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified βfields inside the SMB packetsβ in an NT Trans request, aka βSMB Buffer Overflow Remote Code Execution Vulnerability.β
References
www.securityfocus.com/archive/1/500012/100/0/threaded
www.securityfocus.com/bid/33121
www.securitytracker.com/id?1021560
www.us-cert.gov/cas/techalerts/TA09-013A.html
www.vupen.com/english/advisories/2009/0116
www.zerodayinitiative.com/advisories/ZDI-09-001/
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5863
Related
8.7 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.905 High
EPSS
Percentile
98.7%