4.9
CVE-2009-0229
- EPSS 3.93%
- Veröffentlicht 10.06.2009 18:00:00
- Zuletzt bearbeitet 16.06.2026 23:04:32
- Erkennungen
The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 2000 Version sp4
Microsoft ≫ Windows 2003 Server Version sp2
Microsoft ≫ Windows 2003 Server Version sp2 Edition itanium
Microsoft ≫ Windows 2003 Server Version sp2 Edition x64
Microsoft ≫ Windows Server 2008 Edition x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
Microsoft ≫ Windows Server 2008 Version - Update x32
Microsoft ≫ Windows Server 2008 Version sp2 Update x32
Microsoft ≫ Windows Server 2008 Version sp2 Update x64
Microsoft ≫ Windows Vista Update sp1
Microsoft ≫ Windows Vista Update sp2
Microsoft ≫ Windows Vista Version gold
Microsoft ≫ Windows Vista Version sp1
Microsoft ≫ Windows Vista Version sp2
Microsoft ≫ Windows Xp Version -
Microsoft ≫ Windows Xp Version - Update sp2 Edition x64
Microsoft ≫ Windows Xp Version sp3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.93% | 0.89 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:C/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
http://secunia.com/advisories/35365
http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm
http://www.securitytracker.com/id?1022352
http://www.vupen.com/english/advisories/2009/1541
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022
http://osvdb.org/54933
http://www.securityfocus.com/bid/35208
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5815