CVE-2008-4038

CWE-119 — Buffer Overflow3 documents3 sources
Severity
10.0CRITICAL
EPSS
67.9%
top 1.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Vista
Timeline
PublishedOct 15
Latest updateMay 2

Description

Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vpqx-whj4-pjxx: Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers t↗2022-05-02
▶
CVEList
CVE-2008-4038: Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers t↗2008-10-15
▶
CVE-2008-4038 (CRITICAL CVSS 10) | Buffer underflow in Microsoft Windo | cvebase.io