Lucene search

K
cve[email protected]CVE-2008-0082
HistoryAug 13, 2008 - 12:41 a.m.

CVE-2008-0082

2008-08-1300:41:00
CWE-200
web.nvd.nist.gov
43
cve-2008-0082
activex control
windows messenger
remote attackers
security vulnerability

6.5 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.725 High

EPSS

Percentile

98.1%

An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and β€œchange state,” obtain contact information, and establish audio or video connections without notification via unknown vectors.

6.5 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.725 High

EPSS

Percentile

98.1%