CVE-2008-5232: microsoft windows_2000 Out-of-bounds Write
Vulnerability summary
CVE-2008-5232 is a high (CVSS 9.3) Out-of-bounds Write vulnerability in microsoft windows_2000. EPSS estimates a 32.21% chance of exploitation in the next 30 days, higher than 98.3% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 26-11-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
32.21%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 32.21% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.org)
Maturity: unknown
Microsoft Windows Media Services 'nskey.dll' 4.1 - ActiveX Control Remote Buffer Overflow
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Microsoft2 products
1 vendor · 2 products
References
5 links- www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txtX Refsource MISCExploitThird Party AdvisoryVDB Entry