CVE-2008-4800
published 2008-10-31CVE-2008-4800: The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service (NULL…
PriorityP423medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
25.78%
97.7th percentile
The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service (NULL pointer dereference and Internet Explorer 6.0 crash) via a large negative integer argument to the GetEntryPointForThread method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://securityreason.com/securityalert/4532http://www.securityfocus.com/archive/1/497943/100/0/threadedhttp://www.securityfocus.com/bid/31996https://exchange.xforce.ibmcloud.com/vulnerabilities/46309http://securityreason.com/securityalert/4532http://www.securityfocus.com/archive/1/497943/100/0/threadedhttp://www.securityfocus.com/bid/31996https://exchange.xforce.ibmcloud.com/vulnerabilities/46309
2008-10-31
Published