{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-20T08:54:27.879","vulnerabilities":[{"cve":{"id":"CVE-2009-2505","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.233","lastModified":"2026-06-16T23:09:36.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka \"Internet Authentication Service Memory Corruption Vulnerability.\""},{"lang":"es","value":"The Internet Authentication Service (IAS) en Microsoft Windows Vista SP2 y Server 2008 SP2 no valida adecuadamente las peticiones de autenticación MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP), lo que permite a atacantes remotos ejecutar código de su elección a través de estructuras manipuladas en una petición malformada, conocido como \"Internet Authentication Service Memory Corruption Vulnerability.\""}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023291","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6063","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}