Design/Logic Flaw

2009-06-1018:00:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka “Print Spooler Read File Vulnerability.”

CPENameOperatorVersion
windows_2000eq4.0.0-sp
windows_2003_servereqsp2 x64
windows_2003_servereqsp2 itanium
windows_2003_servereq2.0.0-sp
windows_server_2008eqsp2 x64
windows_server_2008eq sp2itanium
windows_server_2008eqsp2 x32
windows_server_2008eq- x32
windows_vistaeq1.0.0-sp
windows_vistaeq2.0.0-sp

Name	Operator	Version
windows_2000	eq	4.0.0-sp
windows_2003_server	eq	sp2 x64
windows_2003_server	eq	sp2 itanium
windows_2003_server	eq	2.0.0-sp
windows_server_2008	eq	sp2 x64
windows_server_2008	eq	sp2itanium
windows_server_2008	eq	sp2 x32
windows_server_2008	eq	- x32
windows_vista	eq	1.0.0-sp
windows_vista	eq	2.0.0-sp