CVE Database
/

CVE-2009-2512

Back to search

CVE-2009-2512

Published: Nov 11, 2009

Modified: Jan 21, 2025

PUBLISHED

Description

The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

MS09-063
vendor-advisory
x_refsource_MS
TA09-314A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:6079
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now