Buffer Overflow Vulnerability in Microsoft Windows Media Services ActiveX Control
CVE-2008-5232

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Nt
Windows 2000
Vendor
CVE Published:
26 November 2008

Summary

A buffer overflow exists in the CallHTMLHelp method of the Microsoft Windows Media Services ActiveX control housed in nskey.dll version 4.1.00.3917. This vulnerability affects multiple server platforms, including Windows NT and Windows 2000, as well as Avaya Media and Message Application servers. Remote attackers can exploit this flaw by providing a long argument, leading to the execution of arbitrary code on affected systems.

References

http://www.securityfocus.com/data/vulnerabilities/exploit...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/44629
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/30814
vdb-entryx_refsource_BID

EPSS Score

46% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.