CVEvulnerability
CVE-2008-1451
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/30584 Vendor Advisory
- http://securitytracker.com/id?1020228 Patch
- http://www.securityfocus.com/bid/29588 Exploit, Patch
- http://www.us-cert.gov/cas/techalerts/TA08-162B.html US Government Resource
- http://www.vupen.com/english/advisories/2008/1781 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-034 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5582 oval.cisecurity.org
- http://secunia.com/advisories/30584 Vendor Advisory
- http://securitytracker.com/id?1020228 Patch
- http://www.securityfocus.com/bid/29588 Exploit, Patch
- http://www.us-cert.gov/cas/techalerts/TA08-162B.html US Government Resource
- http://www.vupen.com/english/advisories/2008/1781 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-034 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5582 oval.cisecurity.org