CVE-2008-1457: Input Validation
The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1457?
CVE-2008-1457 has a critical severity rating due to its potential to allow remote code execution by authenticated users.
How do I fix CVE-2008-1457?
To fix CVE-2008-1457, you should apply the latest security updates and patches provided by Microsoft for the affected versions of Windows.
What types of systems are affected by CVE-2008-1457?
CVE-2008-1457 affects various Microsoft Windows operating systems including Windows 2000, Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008.
Who can exploit CVE-2008-1457?
CVE-2008-1457 can be exploited by remote authenticated users who send crafted event subscription requests.
When was CVE-2008-1457 discovered?
CVE-2008-1457 was officially published on March 25, 2008, as a known vulnerability in several Microsoft Windows versions.