VulnerabilityModified

CVE-2008-5232

HIGH 9.3EPSS 32.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 32.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 32.21% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-787
Affected: microsoft/windows 2000 · microsoft/windows nt
Source: cve@mitre.org

References

http://packetstormsecurity.org/0808-exploits/wms-overflow.txtExploit, Third Party Advisory
http://securitytracker.com/id?1020733Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/30814Third Party Advisory, VDB Entry
http://www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txtExploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44629Third Party Advisory, VDB Entry
http://packetstormsecurity.org/0808-exploits/wms-overflow.txtExploit, Third Party Advisory
http://securitytracker.com/id?1020733Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/30814Third Party Advisory, VDB Entry
http://www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txtExploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44629Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.