exploitDog

CVE-2008-0951

Опубликовано: 24 мар. 2008

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_vista:*:*:business:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:home_basic:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:home_premium:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*

EPSS

Процентиль: 97%

0.36859

Средний

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-qpfx-f2pv-5c24

github

почти 4 года назад

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions.

EPSS

Процентиль: 97%

0.36859

Средний

9.3 Critical

CVSS2

Дефекты

CWE-94