PT-2008-5018 · Microsoft · Windows Xp

Publicado 2008-08-12 · Atualizado 2017-08-08 · CVE-2008-3648

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP version SP2

Description The issue allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer. This has been exploited in the wild.

Recommendations For Microsoft Windows XP version SP2, update to a newer version to mitigate the risk.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-3648

Produtos afetados

Windows Xp

Referências · 6

• 🔥 http://nullcode.com.ar/ncs/crash/nsloo.htm · Exploit
• http://securityfocus.com/bid/30636 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44423 · Nota
• http://securitytracker.com/id?1020711 · Nota
• http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3648 · Nota de Segurança