CVE-2009-2512

CVSS 9.8 CRITICALEPSS 31.2%CWE-94

Vexday Risk Score

40Attention

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 31.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

11 Nov 2009Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079 http://www.us-cert.gov/cas/techalerts/TA09-314A.html