CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."

CVSS v2.0 5.4 MEDIUM

5.4^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability : 4.9 / Impact : 6.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/30587	Third Party Advisory
http://securitytracker.com/id?1020231	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29509	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-162B.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2008/1783	Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604	Third Party Advisory
http://secunia.com/advisories/30587	Third Party Advisory
http://securitytracker.com/id?1020231	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29509	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-162B.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2008/1783	Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_server_2003:-::::::x64:
	cpe:2.3:o:microsoft:windows_server_2003:-:sp1::::::
	cpe:2.3:o:microsoft:windows_server_2003:-:sp1:::::itanium:*
	cpe:2.3:o:microsoft:windows_server_2003:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::itanium:*
	cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::x64:*
	cpe:2.3:o:microsoft:windows_server_2008:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2008:-::::::itanium:
	cpe:2.3:o:microsoft:windows_server_2008:-::::::x64:
	cpe:2.3:o:microsoft:windows_vista:-:::::::*
	cpe:2.3:o:microsoft:windows_vista:-::::::x64:
	cpe:2.3:o:microsoft:windows_vista:-:sp1::::::
	cpe:2.3:o:microsoft:windows_vista:-:sp1:::::x64:*
	cpe:2.3:o:microsoft:windows_xp:-::::professional::x64:*
	cpe:2.3:o:microsoft:windows_xp:-:sp2::::::
	cpe:2.3:o:microsoft:windows_xp:-:sp2:::professional::x64:
	cpe:2.3:o:microsoft:windows_xp:-:sp3::::::

History

21 Nov 2024, 00:44

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/30587 - Third Party Advisory~~	() http://secunia.com/advisories/30587 - Third Party Advisory
References	~~() http://securitytracker.com/id?1020231 - Third Party Advisory, VDB Entry~~	() http://securitytracker.com/id?1020231 - Third Party Advisory, VDB Entry
References	~~() http://www.securityfocus.com/bid/29509 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/29509 - Third Party Advisory, VDB Entry
References	~~() http://www.us-cert.gov/cas/techalerts/TA08-162B.html - Third Party Advisory, US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA08-162B.html - Third Party Advisory, US Government Resource
References	~~() http://www.vupen.com/english/advisories/2008/1783 - Broken Link~~	() http://www.vupen.com/english/advisories/2008/1783 - Broken Link
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604 - Third Party Advisory~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604 - Third Party Advisory

Information

Published : 2008-06-12 02:32

Updated : 2025-04-09 00:30

NVD link : CVE-2008-1441

Mitre link : CVE-2008-1441

CVE.ORG link : CVE-2008-1441

JSON object : View

Products Affected

microsoft

windows_vista
windows_xp
windows_server_2008
windows_server_2003

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2008-1441", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-06-12T02:32:00.000", "references": [{"url": "http://secunia.com/advisories/30587", "tags": ["Third Party Advisory"], "source": "secure@microsoft.com"}, {"url": "http://securitytracker.com/id?1020231", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/bid/29509", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secure@microsoft.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-162B.html", "tags": ["Third Party Advisory", "US Government Resource"], "source": "secure@microsoft.com"}, {"url": "http://www.vupen.com/english/advisories/2008/1783", "tags": ["Broken Link"], "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604", "tags": ["Third Party Advisory"], "source": "secure@microsoft.com"}, {"url": "http://secunia.com/advisories/30587", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1020231", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/29509", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-162B.html", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/1783", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the \"PGM Malformed Fragment Vulnerability.\""}, {"lang": "es", "value": "Microsoft Windows XP SP2 y SP3, y Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (caida del sistema) a trav\u00e9s de una serie de paquetes Pragmatic General Multicast (PGM) con fragmentos no v\u00e1lidos, tambi\u00e9n conocida como \"Vulnerabilidad de fragmentos malformados PGM\""}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "E3C43D05-40F8-4769-BA6B-A376420EA972"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43D64F8D-975A-4A5B-BEDF-D27D65C96A29"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*", "vulnerable": true, "matchCriteriaId": "72CC2D03-538A-4603-B4FF-C6930F9D7E20"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*", "vulnerable": true, "matchCriteriaId": "9F98AE07-3995-4501-9804-FEA5A87ADFAD"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "A7371547-290D-4D0D-B98D-CA28B4D2E8B0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32623D48-7000-4C7D-823F-7D2A9841D88C"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:itanium:*", "vulnerable": true, "matchCriteriaId": "ED5ADA49-C463-4C85-B9BD-CFEE57417066"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "F2F3C15B-1F4C-4E6C-A254-16F8A17F9A71"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "51160A46-6768-44D5-89CD-6DB9D2268A2E"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A04E39A-623E-45CA-A5FC-25DAA0F275A3"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "7211B5C5-6B6E-4A33-88BC-1D64CD684204"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*", "vulnerable": true, "matchCriteriaId": "18420EC8-633E-4AED-B33F-5A3C673C396D"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*", "vulnerable": true, "matchCriteriaId": "C6109348-BC79-4ED3-8D41-EA546A540C79"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}

5.4 /10