Unscored CVE-2008-1451 EUVD-2008-1455GHSA-mwx8-42cg-gj47

The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network pac…

Published Jun 12, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."

References

30584 third-party-advisory
29588 vdb-entry
TA08-162B third-party-advisory
oval:org.mitre.oval:def:5582 vdb-entry signature
ADV-2008-1781 vdb-entry
MS08-034 vendor-advisory
1020228 vdb-entry