← Database

CVE-2008-1457

CRITICAL CVSS: 9.0 Published: 2008-08-13 Modified: 2026-06-16

Description

The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.

Affected Platforms

Microsoft Windows-NtMicrosoft Windows XpMicrosoft Windows 2000Microsoft Windows VistaMicrosoft Windows 2003 Server

Weakness Type

CWE-20

References