The vulnerability of the Windows Embedded Standard 2009 operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

🗓️ 21 Oct 2015 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Windows Embedded Standard 2009 vulnerability in netapi32.dll causes stack overflow via NetprPathCanonicalize.

Reporter	Title	Published	Views	Family All 46
0day.today	Microsoft Windows - NetAPI32.dll Code Execution (Python) (MS08-067) Exploit	26 Feb 201600:00	–	zdt
GithubExploit	Exploit for Code Injection in Microsoft	4 Jan 202615:28	–	githubexploit
GithubExploit	Exploit for Code Injection in Microsoft	4 Jan 202615:28	–	githubexploit
ATTACKERKB	Microsoft RPC Code Execution MS08-067	13 Apr 202000:00	–	attackerkb
Circl	CVE-2008-4250	23 Oct 200800:00	–	circl
CISA KEV Catalog	Microsoft Windows Buffer Overflow Vulnerability	20 May 202600:00	–	cisa_kev
CISA	CISA Adds Seven Known Exploited Vulnerabilities to Catalog	20 May 202612:00	–	cisa
Check Point Advisories	Microsoft Windows Server Service RPC Request Buffer Overflow (MS08-067; CVE-2008-4250)	23 Oct 200800:00	–	checkpoint_advisories
Check Point Advisories	Microsoft RPC Services Path Canonicalization Remote Code Execution (CVE-2008-4250)	21 Jul 201300:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Eclipsedwing RPC Buffer Overflow (CVE-2008-4250)	27 Apr 201700:00	–	checkpoint_advisories

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
exploit-db	www.exploit-db.com/exploits/6841
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

22 May 2026 00:00Current

CVSS 210

EPSS0.92078

windows embedded standard netapi32 netprpathcanonicalize stack buffer overflow unicode strings system32 directory