CVE-2009-2512 - The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."

Back Back to CVE browser

CRITICAL

The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."

Published Nov 11, 2009

9.8

CRITICAL

CVSS 3.1

EPSS 31.21%

Description

The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

http://www.us-cert.gov/cas/techalerts/TA09-314A.html
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.us-cert.gov/cas/techalerts/TA09-314A.html		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079		vdb-entrysignaturex_refsource_OVAL