CVE-2008-4268

Опубликовано: 10 дек. 2008

Источник: nvd

CVSS2: 8.5

EPSS Средний

Описание

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."

Комментарий

http://www.microsoft.com/technet/security/Bulletin/MS08-075.mspx

Windows Saved Search Vulnerability - CVE-2008-4268

A remote code execution vulnerability exists when saving a specially crafted search file within Windows Explorer. This operation causes Windows Explorer to exit and restart in an exploitable manner.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.50335

Средний

8.5 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-vgvc-r466-8v67

github

почти 4 года назад