CVE-2008-1444

EPSS 39.48%
Veröffentlicht 12.06.2008 02:32:00
Zuletzt bearbeitet 16.06.2026 22:51:44
Erkennungen
Login

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 14

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Directx Version 9.0

   Microsoft ≫ Windows-nt Version xp Update sp3
   Microsoft ≫ Windows 2000 Update sp4
   Microsoft ≫ Windows 2003 Server Edition x64
   Microsoft ≫ Windows 2003 Server Update sp1
   Microsoft ≫ Windows 2003 Server Update sp1 Edition itanium
   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows 2003 Server Update sp2 Edition itanium
   Microsoft ≫ Windows 2003 Server Update sp2 Edition x64
   Microsoft ≫ Windows Xp Edition x64
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp2 Edition x64

Microsoft ≫ Directx Version 10.0

   Microsoft ≫ Windows-nt Version 2008 Edition itanium
   Microsoft ≫ Windows-nt Version 2008 Edition x32
   Microsoft ≫ Windows-nt Version 2008 Edition x64
   Microsoft ≫ Windows Vista Edition x64

Microsoft ≫ Directx Version 7.0

Microsoft ≫ Windows 2000 Update sp4

Microsoft ≫ Directx Version 8.1

Microsoft ≫ Windows 2000 Update sp4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	39.48%	0.984

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://marc.info/?l=bugtraq&m=121380194923597&w=2

Mailing List

http://www.us-cert.gov/cas/techalerts/TA08-162B.html

Third Party Advisory

US Government Resource

http://secunia.com/advisories/30579

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1780

Broken Link

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033

http://securityreason.com/securityalert/3937

Third Party Advisory

http://securitytracker.com/id?1020223

Third Party Advisory

VDB Entry

http://www.securityfocus.com/archive/1/493250/100/0/threaded

http://www.securityfocus.com/bid/29578

Patch

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-08-040/

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562

https://nvd.nist.gov/vuln/detail/CVE-2008-1444

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1444

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1444

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1444