Microsoft Windows事件系统用户订阅请求权限提升漏洞（MS08-049）

BUGTRAQ ID: 30584 CVECAN ID: CVE-2008-1457 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows事件系统在创建用户订阅时没有正确地验证订阅请求，导致权限提升漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者随后可安装程序；查看、更改或删除数据；或者创建拥有完全管理权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista...

Microsoft Security Bulletin MS08-049 – Important Vulnerabilities in Event System Could Allow Remote Code Execution (950974)

Microsoft Security Bulletin MS08-049 – Important Vulnerabilities in Event System Could Allow Remote Code Execution 950974 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This update resolves two privately reported vulnerabilities in Microsoft Windows Event System tha...

MS08-049: Vulnerability in Event System could allow remote code execution

None None...