Lucene search

[email protected]CVE-2008-4299

HistorySep 29, 2008 - 5:17 p.m.

CVE-2008-4299

2008-09-2917:17:29

CWE-189

[email protected]

web.nvd.nist.gov

cve-2008-4299

microsoft

internet authentication service

ias helper

com component

denial of service

browser crash

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON

A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.

Affected configurations

NVD

Node

microsoftinternet_authentication_service_helper_com_component

CPENameOperatorVersion
microsoft:internet_authentication_service_helper_com_componentmicrosoft internet authentication service helper com componenteq*

CPE	Name	Operator	Version
microsoft:internet_authentication_service_helper_com_component	microsoft internet authentication service helper com component	eq	*

References

securityreason.com/securityalert/4323

www.securityfocus.com/archive/1/496695/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/45556

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON

Related for CVE-2008-4299

cvelist1 nvd1 prion1