Dashboard / CVE-2008-4250

CVE-2008-4250

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows
Date Added 2026-05-20
Remediation Due 2026-06-03
https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 ; https://nvd.nist.gov/vuln/detail/CVE-2008-4250

Weakness Classification (2)

Affected Software (18)

VendorProductVersion
microsoft windows_2000 -
microsoft windows_server_2003 -
microsoft windows_server_2003 -
microsoft windows_server_2003 -
microsoft windows_server_2003 -
microsoft windows_server_2003 -
microsoft windows_server_2003 -
microsoft windows_server_2008 -
microsoft windows_server_2008 -
microsoft windows_server_2008 -
microsoft windows_vista -
microsoft windows_vista -
microsoft windows_vista -
microsoft windows_vista -
microsoft windows_xp -
microsoft windows_xp -
microsoft windows_xp -
microsoft windows_xp -

References & Advisories (19)

http://www.kb.cert.org/vuls/id/827267
Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-088A.html
Third Party Advisory US Government Resource
http://secunia.com/advisories/32326
Patch Vendor Advisory
http://marc.info/?l=bugtraq&m=122703006921213&w=2
Issue Tracking Mailing List Third Party Advisory
https://www.exploit-db.com/exploits/6824
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/6841
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/7104
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/7132
Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/497808/100/0/threaded
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/497816/100/0/threaded
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1021091
Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-297A.html
Broken Link Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/31874
Broken Link Exploit Patch

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links