NVD

Id
47577  
Name
CVE-2009-0243  
Description
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) inserting CD-ROM media, (2) inserting DVD media, (3) connecting a USB device, and (4) connecting a Firewire device; (5) allows user-assisted remote attackers to execute arbitrary code by mapping a network drive; and allows user-assisted attackers to execute arbitrary code by clicking on (6) an icon under My ComputerDevices with Removable Storage and (7) an option in an AutoPlay dialog, related to the Autorun.inf file. NOTE: vectors 1 and 3 on Vista are already covered by CVE-2008-0951.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-01-21  
Modified Date
2009-01-29  
Seq
2009-0243  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238432 47577 CVE-2009-0243 http://isc.sans.org/diary.html?storyid=5695  View
238433 47577 CVE-2009-0243 1021629  View
238434 47577 CVE-2009-0243 TA09-020A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40021 JVNDB-2009-001027 Microsoft Windows における任意のコードを実行される脆弱性 Microsoft Windows には、Autorun および NoDriveTypeAutoRun においてレジストリ値が適切に反映されないため任意のコードを実行される脆弱性が存在します。 CVE-2009-0243 37674 CVE-2009-0243 47577 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001027.html 2009-01-21 2009-02-25 View