CVE-2008-3479 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3479
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3479

Description: Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/45538 http://xforce.iss.net/xforce/xfdb/45537 ST 1021052 SAID Secunia Advisory: SA32260 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5998 MS http://www.microsoft.com/technet/security/Bulletin/MS08-065.mspx MISC http://dvlabs.tippingpoint.com/advisory/TPTI-08-07 HP http://marc.info/?l=bugtraq&m=122479227205998&w=2 CERT http://www.us-cert.gov/cas/techalerts/TA08-288A.html BID 31637

Return to the previous page.