6.9

CVE-2009-1922

EPSS 1.89%
Veröffentlicht 12.08.2009 17:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000 Version- Updatesp4

Microsoft ≫ Windows Server 2003 Updatesp2

Microsoft ≫ Windows Vista

Microsoft ≫ Windows Vista Version- Update- Editionx64

Microsoft ≫ Windows Xp Version- Updatesp2

Microsoft ≫ Windows Xp Version- Updatesp2 Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.89%	0.826

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA09-223A.html

US Government Resource

http://en.securitylab.ru/lab/PT-2008-09

http://osvdb.org/56901

http://secunia.com/advisories/36214

Vendor Advisory

http://www.securityfocus.com/archive/1/505691/100/0/threaded

http://www.securitytracker.com/id?1022714

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-040

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6109

https://nvd.nist.gov/vuln/detail/CVE-2009-1922

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1922

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1922

EUVD