Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-4323

4 documents4 sources
Severity
4.3MEDIUM
EPSS
12.4%
top 6.10%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedSep 29
Latest updateMay 2

Description

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application crash) via a crafted .ZIP file.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-47qh-xg57-3fg9: Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application crash) via a crafted2022-05-02
CVEList
CVE-2008-4323: Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application crash) via a crafted2008-09-29

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows Explorer - '.zip' Denial of Service2008-09-28
CVE-2008-4323 (MEDIUM CVSS 4.3) | Windows Explorer in Microsoft Windo | cvebase.io