PT-2009-4921 · Microsoft · Windows 2000+3

Tavis Ormandy · CVE-2009-2514 · Publicado 2009-11-11 · Atualizado 2023-12-07

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows Server 2003 SP2

Description A remote code execution issue exists due to the improper parsing of font code when building a table of directory entries. This allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font. An attacker who successfully exploited this issue could run arbitrary code in kernel mode, then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows 2000 SP4, update to a newer version to mitigate the risk. For Windows XP SP2, update to a newer version to mitigate the risk. For Windows XP SP3, update to a newer version to mitigate the risk. For Windows Server 2003 SP2, update to a newer version to mitigate the risk.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-2514

Produtos afetados

Windows

Windows 2000

Windows Server 2003

Windows Xp

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/browser/ms09_065_eot_integer.rb · Exploit
• 🔥 https://exploit-db.com/exploits/10068 · Exploit
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-065 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2514 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2009-2514 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6406 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA09-314A.html · Nota