VULNERABILITY INTELLIGENCE

CVE-2008-1457

CVSS score9 HIGH
EPSS probability36.27%
CISA KEVNot currently listed
Published2008-08-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references