vulnwire
6.9med

CVE-2008-52291 exploit

Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in th…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
6.9
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.6%
percentile 85%
Public exploits
1
Exploit-DB

Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service (system crash) via a large invalid PrefixLength to the CreateIpForwardEntry2 method, as demonstrated by a "route add" command. NOTE: this issue might not cross privilege boundaries.

Exploit prediction (EPSS)

2.59% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.

Exploits and detections

  • EDB-32590 Microsoft Windows Vista - 'iphlpapi.dll' Local Kernel Buffer Overflow · local · 2008-11-19

CVSS scores

Assigned byVersionScoreVector
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • securityfocus.com /archive/1/498650/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/46742 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /archive/1/498471/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/32791 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1021245 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityreason.com /securityalert/4646 · third-party-advisory, x_refsource_SREASON, x_transferred
  • securityfocus.com /bid/32357 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.