Buffer Overflow Vulnerability in Microsoft Windows Media Services ActiveX Control
CVE-2008-5232

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Nt
Windows 2000
Vendor
CVE Published:
26 November 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 33%

What is CVE-2008-5232?

A buffer overflow exists in the CallHTMLHelp method of the Microsoft Windows Media Services ActiveX control housed in nskey.dll version 4.1.00.3917. This vulnerability affects multiple server platforms, including Windows NT and Windows 2000, as well as Avaya Media and Message Application servers. Remote attackers can exploit this flaw by providing a long argument, leading to the execution of arbitrary code on affected systems.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-5232 - Proof of Concept

CVE-2008-5232 - Proof of Concept

References

http://www.securityfocus.com/data/vulnerabilities/exploit...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/44629
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/30814
vdb-entryx_refsource_BID

EPSS Score

33% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.