Lucene search

K
prionPRIOn knowledge basePRION:CVE-2009-2523
HistoryNov 11, 2009 - 7:30 p.m.

Heap overflow

2009-11-1119:30:00
PRIOn knowledge base
www.prio-n.com
1

8.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.65 Medium

EPSS

Percentile

97.8%

The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka β€œLicense Logging Server Heap Overflow Vulnerability.”

8.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.65 Medium

EPSS

Percentile

97.8%