9.3crit
CVE-2008-5232in critical feed1 exploit
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Medi…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
32.2%
percentile 98%
Public exploits
1
Exploit-DB
Summary
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit prediction (EPSS)
32.21% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- EDB-32294 Microsoft Windows Media Services 'nskey.dll' 4.1 - ActiveX Control Remote Buffer Overflow · dos · 2008-08-22
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-787 Out-of-bounds Write
References
- securityfocus.com /data/vulnerabilities/exploits/30814.html.txt · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/44629 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/30814 · vdb-entry, x_refsource_BID, x_transferred
- packetstormsecurity.org /0808-exploits/wms-overflow.txt · x_refsource_MISC, x_transferred
- securitytracker.com /id?1020733 · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2008-5232
- NVD: CVE-2008-5232
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.