Event System Vulnerability| ID: oval:org.mitre.oval:def:6095 | Date: (C)2008-08-13 (M)2022-10-10 |
| Class: VULNERABILITY | Family: windows |
The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
| Platform: |
| Microsoft Windows 2000 |
| Microsoft Windows XP |
| Microsoft Windows Server 2003 |
| Microsoft Windows Vista |
| Microsoft Windows Server 2008 |
