ByteOS Network

Vulnerability Details :

CVE-2008-2253

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-10 Sep, 2008 | 15:00

Updated At-07 Aug, 2024 | 08:58

Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:10 Sep, 2008 | 15:00

Updated At:07 Aug, 2024 | 08:58

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2008/2522	vdb-entry x_refsource_VUPEN
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-054	vendor-advisory x_refsource_MS
http://www.securityfocus.com/bid/30550	vdb-entry x_refsource_BID
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP
http://www.securitytracker.com/id?1020831	vdb-entry x_refsource_SECTRACK
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5615	vdb-entry signature x_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA08-253A.html	third-party-advisory x_refsource_CERT

Hyperlink: http://www.vupen.com/english/advisories/2008/2522

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS

Resource:

x_refsource_CONFIRM

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-054

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: http://www.securityfocus.com/bid/30550

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.securitytracker.com/id?1020831

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5615

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-253A.html

Resource:

third-party-advisory

x_refsource_CERT

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2008/2522	vdb-entry x_refsource_VUPEN x_transferred
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS	x_refsource_CONFIRM x_transferred
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-054	vendor-advisory x_refsource_MS x_transferred
http://www.securityfocus.com/bid/30550	vdb-entry x_refsource_BID x_transferred
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP x_transferred
http://www.securitytracker.com/id?1020831	vdb-entry x_refsource_SECTRACK x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5615	vdb-entry signature x_refsource_OVAL x_transferred
http://www.us-cert.gov/cas/techalerts/TA08-253A.html	third-party-advisory x_refsource_CERT x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2522

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-054

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: http://www.securityfocus.com/bid/30550

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.securitytracker.com/id?1020831

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5615

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-253A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:11 Sep, 2008 | 01:10

Updated At:30 Oct, 2018 | 16:25

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

Evaluator Description

http://www.microsoft.com/technet/security/Bulletin/MS08-054.mspx Security updates are available from Microsoft Update, Windows Update, and Office Update. Security updates are also available from the Microsoft Download Center. You can find them most easily by doing a keyword search for "security update. *Windows Server 2008 server core installation not affected. The vulnerability addressed by this update does not affect supported editions of Windows Server 2008 if Windows Server 2008 was installed using the Server Core installation option, even though the files affected by this vulnerability may be present on the system. However, users with the affected files will still be offered this update because the update files are newer (with higher version numbers) than the files that are currently on your system. For more information on this installation option, see Server Core. Note that the Server Core installation option does not apply to certain editions of Windows Server 2008; see Compare Server Core Installation Options.