CVE-2008-1444

EPSS 39.48%
Veröffentlicht 12.06.2008 02:32:00
Zuletzt bearbeitet 16.06.2026 22:51:44
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 14

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Directx Version9.0

   Microsoft ≫ Windows-nt Versionxp Updatesp3
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2003 Server Editionx64
   Microsoft ≫ Windows 2003 Server Updatesp1
   Microsoft ≫ Windows 2003 Server Updatesp1 Editionitanium
   Microsoft ≫ Windows 2003 Server Updatesp2
   Microsoft ≫ Windows 2003 Server Updatesp2 Editionitanium
   Microsoft ≫ Windows 2003 Server Updatesp2 Editionx64
   Microsoft ≫ Windows Xp Editionx64
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2 Editionx64

Microsoft ≫ Directx Version10.0

   Microsoft ≫ Windows-nt Version2008 Editionitanium
   Microsoft ≫ Windows-nt Version2008 Editionx32
   Microsoft ≫ Windows-nt Version2008 Editionx64
   Microsoft ≫ Windows Vista Editionx64

Microsoft ≫ Directx Version7.0

Microsoft ≫ Windows 2000 Updatesp4

Microsoft ≫ Directx Version8.1

Microsoft ≫ Windows 2000 Updatesp4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	39.48%	0.984

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://marc.info/?l=bugtraq&m=121380194923597&w=2

Mailing List

http://www.us-cert.gov/cas/techalerts/TA08-162B.html

Third Party Advisory

US Government Resource

http://secunia.com/advisories/30579

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1780

Broken Link

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033

http://securityreason.com/securityalert/3937

Third Party Advisory

http://securitytracker.com/id?1020223

Third Party Advisory

VDB Entry

http://www.securityfocus.com/archive/1/493250/100/0/threaded

http://www.securityfocus.com/bid/29578

Patch

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-08-040/

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562

https://nvd.nist.gov/vuln/detail/CVE-2008-1444

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1444

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1444

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1444