NVD

Id
49189  
Name
CVE-2009-1925  
Description
The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-08  
Modified Date
2010-08-21  
Seq
2009-1925  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249084 49189 CVE-2009-1925 oval:org.mitre.oval:def:6374  View
249085 49189 CVE-2009-1925 MS09-048  View
249086 49189 CVE-2009-1925 TA09-251A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41084 JVNDB-2009-002091 Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性 Microsoft Windows の TCP/IP 実装には、状態の情報を適切に管理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-1925 39356 CVE-2009-1925 49189 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002091.html 2009-09-08 2009-10-14 View