Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-5232

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.3CRITICAL
EPSS
33.8%
top 3.05%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Windows NT
Timeline
PublishedNov 26
Latest updateMay 13

Description

Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-v7fh-fq7j-c7rm: Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey↗2022-05-13
▶
CVEList
CVE-2008-5232: Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey↗2008-11-26
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows Media Services 'nskey.dll' 4.1 - ActiveX Control Remote Buffer Overflow↗2008-08-22
▶
CVE-2008-5232 (CRITICAL CVSS 9.3) | Buffer overflow in the CallHTMLHelp | cvebase.io