CVE-2008-3479 Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a cr...
HighCVSS 10.0
EPSS 44.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- dvlabs.tippingpoint.com patch
- SSRT080143 vendor-advisory
- 32260 patch third-party-advisory vendor-advisory
- 31637 patch vdb-entry
- 1021052 vdb-entry
- TA08-288A third-party-advisory us-government-resource
- ADV-2008-2816 vdb-entry
- MS08-065 vendor-advisory
- win-msmq-rpc-code-execution(45537) vdb-entry
- win-ms08kb951071-update(45538) vdb-entry
- oval:org.mitre.oval:def:5998 signature vdb-entry