Lucene search

K
cve[email protected]CVE-2009-0230
HistoryJun 10, 2009 - 6:00 p.m.

CVE-2009-0230

2009-06-1018:00:00
CWE-264
web.nvd.nist.gov
24
windows
print spooler
vulnerability
cve-2009-0230
nvd
microsoft
privilege escalation
dll file
rpc

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.0%

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka β€œPrint Spooler Load Library Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_2003_serversp2x64
OR
microsoftwindows_serverMatch2008itanium
OR
microsoftwindows_serverMatch2008sp2itanium
OR
microsoftwindows_server_2008
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008sp2
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_vista
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp2x64
OR
microsoftwindows_xpsp3

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.0%