5.4

CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows Server 2003 Version - HwPlatform x64
Microsoft ≫ Windows Server 2003 Version - Update sp1
Microsoft ≫ Windows Server 2003 Version - Update sp1 HwPlatform itanium
Microsoft ≫ Windows Server 2003 Version - Update sp2
Microsoft ≫ Windows Server 2003 Version - Update sp2 HwPlatform itanium
Microsoft ≫ Windows Server 2003 Version - Update sp2 HwPlatform x64
Microsoft ≫ Windows Server 2008 Version - HwPlatform itanium
Microsoft ≫ Windows Server 2008 Version - HwPlatform x64
Microsoft ≫ Windows Vista Version -
Microsoft ≫ Windows Vista Version - HwPlatform x64
Microsoft ≫ Windows Vista Version - Update sp1
Microsoft ≫ Windows Vista Version - Update sp1 HwPlatform x64
Microsoft ≫ Windows Xp Version - SwEdition professional HwPlatform x64
Microsoft ≫ Windows Xp Version - Update sp2
Microsoft ≫ Windows Xp Version - Update sp2 SwEdition professional HwPlatform x64
Microsoft ≫ Windows Xp Version - Update sp3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.67% 0.971
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 4.9 6.9
AV:N/AC:H/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.us-cert.gov/cas/techalerts/TA08-162B.html
Third Party Advisory
US Government Resource
http://secunia.com/advisories/30587
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1783
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036
http://securitytracker.com/id?1020231
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/29509
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604
Third Party Advisory