medium4.9Public exploit code
CVE-2009-1808
Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an imp…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows XP/2000/2003 - Desktop Wall Paper System Parameter Privilege Escalation2009-02-02 · local · windows · Verified
Impact
Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35323
- http://www.ragestorm.net/blogs/?p=78
- http://www.securityfocus.com/bid/35120
- http://www.securitytracker.com/id?1022330
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50903
- http://secunia.com/advisories/35323
- http://www.ragestorm.net/blogs/?p=78
- http://www.securityfocus.com/bid/35120
- http://www.securitytracker.com/id?1022330
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50903