Improper input validation in Microsoft Windows Server 2003
CVE-2008-1441
Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.197 (97.1th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- secure@microsoft.com (vdb-entry, Broken Link, x_refsource_VUPEN)
- secure@microsoft.com (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)