Lucene search

K
cve[email protected]CVE-2008-5232
HistoryNov 26, 2008 - 1:30 a.m.

CVE-2008-5232

2008-11-2601:30:00
CWE-787
web.nvd.nist.gov
30
cve-2008-5232
buffer overflow
callhtmlhelp
windows media services
activex control
remote code execution
nvd
security vulnerability
microsoft windows_nt
windows 2000
avaya media and message application servers

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.158 Low

EPSS

Percentile

95.9%

Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.158 Low

EPSS

Percentile

95.9%

Related for CVE-2008-5232