The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
microsoft windows-nt 2008 |
||
microsoft windows-nt vista |
||
microsoft windows-nt xp |
||
microsoft windows 2000 |
||
microsoft windows 2003 server |
||
microsoft windows vista - |
||
microsoft windows xp |