Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka "Local Security Authority Subsystem Service Integer Overflow Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.us-cert.gov/cas/techalerts/TA09-286A.html - US Government Resource | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-059 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6263 - |
07 Dec 2023, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:* |
Information
Published : 2009-10-14 10:30
Updated : 2024-11-21 01:05
NVD link : CVE-2009-2524
Mitre link : CVE-2009-2524
CVE.ORG link : CVE-2009-2524
JSON object : View
Products Affected
microsoft
- windows_vista
- windows_7
- windows_xp
- windows_2003_server
- windows_server_2008
CWE
CWE-189
Numeric Errors