PT-2009-2903 · Microsoft · Windows Print Spooler Service+2

Jun Mao · Publicado 2009-06-10 · Atualizado 2018-10-12 · CVE-2009-0228

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4

Description A remote code execution issue exists in the Windows Print Spooler Service, allowing a remote, unauthenticated attacker to execute arbitrary code on an affected system. This could enable the attacker to take complete control of the system, install programs, view, change, or delete data, or create new accounts. The issue is related to a stack-based buffer overflow in the EnumeratePrintShares function in win32spl.dll, which can be triggered by a crafted ShareName in a response to an RPC request.

Recommendations For Microsoft Windows 2000 SP4, apply the necessary patch to fix the buffer overflow in the Print Spooler Service to prevent remote code execution. As a temporary workaround, consider restricting access to the Windows Print Spooler Service until a patch is available.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-0228

Produtos afetados

Windows

Windows 2000

Windows Print Spooler Service

Referências · 13

• http://securitytracker.com/id?1022352 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-022 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6317 · Nota
• http://vupen.com/english/advisories/2009/1541 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm · Nota
• http://osvdb.org/54932 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=806 · Nota
• http://secunia.com/advisories/35365 · Nota
• http://securityfocus.com/bid/35206 · Nota
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0228 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2009-0228 · Nota de Segurança