PT-2009-4921 · Microsoft · Windows 2000+3

Tavis Ormandy · Published 2009-11-11 · Updated 2023-12-07 · CVE-2009-2514

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows Server 2003 SP2

Description A remote code execution issue exists due to the improper parsing of font code when building a table of directory entries. This allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font. An attacker who successfully exploited this issue could run arbitrary code in kernel mode, then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows 2000 SP4, update to a newer version to mitigate the risk. For Windows XP SP2, update to a newer version to mitigate the risk. For Windows XP SP3, update to a newer version to mitigate the risk. For Windows Server 2003 SP2, update to a newer version to mitigate the risk.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-2514

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/browser/ms09_065_eot_integer.rb · Exploit
• 🔥 https://exploit-db.com/exploits/10068 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2514 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-2514 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065 · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-065 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6406 · Note
• http://us-cert.gov/cas/techalerts/TA09-314A.html · Note