NVD

Id
1403  
Name
CVE-2008-1456  
Description
Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-13  
Modified Date
2011-03-07  
Seq
2008-1456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9174 1403 CVE-2008-1456 SSRT080117  View
9175 1403 CVE-2008-1456 oval:org.mitre.oval:def:5630  View
9176 1403 CVE-2008-1456 MS08-049  View
9177 1403 CVE-2008-1456 30586  View
9178 1403 CVE-2008-1456 1020677  View
9179 1403 CVE-2008-1456 TA08-225A  View
9180 1403 CVE-2008-1456 ADV-2008-2353  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46332 JVNDB-2008-001642 Microsoft Windows のイベントシステムにおける任意のコードを実行される脆弱性 Microsoft Windows のイベントシステムには、配列インデックスに不備があり、認証されたユーザに任意のコードを実行される脆弱性が存在します。 CVE-2008-1456 31569 CVE-2008-1456 1403 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001642.html 2008-08-12 2008-09-09 View