NVD

Id
47897  
Name
CVE-2009-0568  
Description
The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2010-08-21  
Seq
2009-0568  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240000 47897 CVE-2009-0568 http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx  View
240001 47897 CVE-2009-0568 oval:org.mitre.oval:def:6227  View
240002 47897 CVE-2009-0568 MS09-026  View
240003 47897 CVE-2009-0568 35219  View
240004 47897 CVE-2009-0568 1022357  View
240005 47897 CVE-2009-0568 TA09-160A  View
240006 47897 CVE-2009-0568 ADV-2009-1545  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40798 JVNDB-2009-001804 Microsoft Windows の RPC マーシャリングエンジンにおける任意のメモリ配置を上書きされる脆弱性 Microsoft Windows の RPC マーシャリングエンジンには、内部状態を適切に更新しないため、任意のメモリ配置を上書きされる脆弱性が存在します。 CVE-2009-0568 37999 CVE-2009-0568 47897 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001804.html 2009-06-09 2009-07-24 View