Unscored CVE-2009-0086 EUVD-2009-0095GHSA-369w-jch7-c8m6

Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold…

Published Apr 15, 2009 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."

References

oval:org.mitre.oval:def:6149 vdb-entry signature
34435 vdb-entry
34677 third-party-advisory
TA09-104A third-party-advisory
1022041 vdb-entry
53620 vdb-entry
ADV-2009-1027 vdb-entry
MS09-013 vendor-advisory