Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-0951
HistoryMar 24, 2008 - 10:44 p.m.

CVE-2008-0951

2008-03-2422:44:00
CWE-94
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.279 Low

EPSS

Percentile

96.8%

JSON

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions.

Affected configurations

NVD
Node
microsoftwindows_vistabusiness
OR
microsoftwindows_vistaenterprise
OR
microsoftwindows_vistahome_basic
OR
microsoftwindows_vistahome_premium
OR
microsoftwindows_vistaultimate

Related

cve 2
cert 1
prion 2
cvelist 2
openvas 2
securityvulns 1
nvd 1
cve
cve
CVE-2008-0951
2008-03-24 22:44:00
CVE-2009-0243
2009-01-21 20:30:00
cert
cert
Microsoft Windows fails to properly handle the NoDriveTypeAutoRun registry value
2008-03-20 00:00:00
prion
prion
Code injection
2008-03-24 22:44:00
Code injection
2009-01-21 20:30:00
cvelist
cvelist
CVE-2008-0951
2008-03-24 22:00:00
CVE-2009-0243
2009-01-21 20:00:00
openvas
openvas
Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
2009-02-02 00:00:00
Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
2009-02-02 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS08-038 – Important Vulnerability in Windows Explorer Could Allow Remote Code Execution (950582)
2008-07-09 00:00:00
nvd
nvd
CVE-2009-0243
2009-01-21 20:30:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.279 Low

EPSS

Percentile

96.8%

JSON
Related for NVD:CVE-2008-0951
cve2cert1prion2cvelist2openvas2securityvulns1nvd1