Leírás
A program a tervezett memória puffer hátárán kívüli helyeken végezhet műveleteket.
CVE-2008-4250
Alapadatok
Súlyosság
Kritikus
Publikálás dátuma
2010. 10. 23.
Érintett rendszerek
CWE
CVSS vektor
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Hálózatról kihasználható
- Alacsony komplexitás
- Nem szükséges jogosultság
- Nem szükséges felhasználói interakció
Érintett rendszerek és verzióik
cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
Hivatkozások
http://marc.info/?l=bugtraq&m=122703006921213&w=2
http://secunia.com/advisories/32326
http://www.kb.cert.org/vuls/id/827267
http://www.securitytracker.com/id?1021091
https://www.exploit-db.com/exploits/7132
https://www.exploit-db.com/exploits/6841
http://www.securityfocus.com/bid/31874
http://marc.info/?l=bugtraq&m=122703006921213&w=2
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067
http://blogs.securiteam.com/index.php/archives/1150
https://www.exploit-db.com/exploits/6824
http://www.vupen.com/english/advisories/2008/2902
https://exchange.xforce.ibmcloud.com/vulnerabilities/46040
http://www.securityfocus.com/archive/1/497808/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA08-297A.html
https://www.exploit-db.com/exploits/7104
http://www.us-cert.gov/cas/techalerts/TA09-088A.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093
http://www.securityfocus.com/archive/1/497816/100/0/threaded
https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4250
http://secunia.com/advisories/32326
http://www.kb.cert.org/vuls/id/827267
http://www.securitytracker.com/id?1021091
https://www.exploit-db.com/exploits/7132
https://www.exploit-db.com/exploits/6841
http://www.securityfocus.com/bid/31874
http://marc.info/?l=bugtraq&m=122703006921213&w=2
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067
http://blogs.securiteam.com/index.php/archives/1150
https://www.exploit-db.com/exploits/6824
http://www.vupen.com/english/advisories/2008/2902
https://exchange.xforce.ibmcloud.com/vulnerabilities/46040
http://www.securityfocus.com/archive/1/497808/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA08-297A.html
https://www.exploit-db.com/exploits/7104
http://www.us-cert.gov/cas/techalerts/TA09-088A.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093
http://www.securityfocus.com/archive/1/497816/100/0/threaded
https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4250