The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_2000 | - | - |
| microsoft / windows_xp | - | - |
| microsoft / windows_2003_server | - | - |
| microsoft / windows-nt | 2008 | 2008.x |
| microsoft / windows-nt | vista | vista.x |
| microsoft / windows-nt | xp-sp3 | xp-sp3.x |
| microsoft / windows_vista | --sp1 | --sp1.x |