CVE-2008-5229

Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service system crash via a large invalid PrefixLength to the...

CVE-2008-5229

The CVE-2008-5229 issue is a stack-based buffer overflow in Microsoft Device IO Control (iphlpapi.dll) affecting Windows Vista Gold and SP1. An attacker could cause a system crash or gain privileges by supplying a large invalid PrefixLength to CreateIpForwardEntry2 (e.g., via a route add). Affect...