Lucene search

K
prionPRIOn knowledge basePRION:CVE-2008-4269
HistoryDec 10, 2008 - 2:00 p.m.

Design/Logic Flaw

2008-12-1014:00:00
PRIOn knowledge base
www.prio-n.com
1

7.5 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.949 High

EPSS

Percentile

99.2%

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka โ€œWindows Search Parsing Vulnerability.โ€

7.5 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.949 High

EPSS

Percentile

99.2%