Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)

This host is running Windows Operating System and is prone to Autorun Arbitrary Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: secpodms08-038.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Autorun Arbitrary Code Execution Vulnerability 08-038 Authors: Sujit Ghosal Updated By:...

Code injection

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

CVE-2008-0951

CVE-2008-0951 affects Windows Vista/Server 2008 where NoDriveTypeAutoRun is not properly enforced. The vulnerability allows code execution via (1) CD-ROM AutoRun paths or (2) U3-enabled USB devices containing an Autorun.inf file, with user-assisted remote or physically proximate access. Microsoft...