Lucene search

MitreCVE-2008-5823

HistoryJan 02, 2009 - 7:30 p.m.

CVE-2008-5823

2009-01-0219:30:01

CWE-189

mitre

web.nvd.nist.gov

cve-2008-5823

activex

prtstb06.dll

microsoft money 2006

denial of service

wscript

windows script host

wsh

access violation

application crash

zero value

startup property

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

68.0%

JSON

An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.

Affected configurations

Nvd

Node

microsoftmoneyMatch2006

AND

microsoftwindows_vistaMatch-

microsoftwindows_vistaMatch-sp1

VendorProductVersionCPE
microsoftmoney2006cpe:2.3:a:microsoft:money:2006:*:*:*:*:*:*:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	money	2006	cpe:2.3:a:microsoft:money:2006:::::::*
microsoft	windows_vista	-	cpe:2.3:o:microsoft:windows_vista:-:::::::*
microsoft	windows_vista	-	cpe:2.3:o:microsoft:windows_vista:-:sp1::::::

References

jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html

exchange.xforce.ibmcloud.com/vulnerabilities/47756

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

68.0%

JSON

Related for CVE-2008-5823