Vulnerability Details : CVE-2009-2505

The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability."
Vulnerability category: Memory CorruptionExecute codeBypassGain privilege
Published 2009-12-09 18:30:00
Updated 2018-10-12 21:51:54
View at NVD,

Exploit prediction scoring system (EPSS) score for CVE-2009-2505

Probability of exploitation activity in the next 30 days: 54.54%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2009-2505

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source

CWE ids for CVE-2009-2505

  • When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
    Assigned by: (Primary)

References for CVE-2009-2505

Products affected by CVE-2009-2505

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to terms of use!