CVE

Id
39940  
CVE No.
CVE-2009-2505  
Status
Candidate  
Description
The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438977 39940 CVE-2009-2505 MS:MS09-071  View
438978 39940 CVE-2009-2505 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-071.mspx  View
438979 39940 CVE-2009-2505 CERT:TA09-342A  View
438980 39940 CVE-2009-2505 URL:http://www.us-cert.gov/cas/techalerts/TA09-342A.html  View
438981 39940 CVE-2009-2505 OVAL:oval:org.mitre.oval:def:6063  View
438982 39940 CVE-2009-2505 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6063  View
438983 39940 CVE-2009-2505 SECTRACK:1023291  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41431 JVNDB-2009-002438 Microsoft Windows の Active Directory フェデレーションサービスにおける任意のコードを実行される脆弱性 Microsoft Windows の Active Directory フェデレーションサービスには、HTTP リクエストのヘッダが適切に検証されないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2509 39940 9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002438.html  View