CVE-2008-3479

CRITIQUE 10.0CVE-2008-3479 · Published 15/10/2008 · updated 16/06/2026

En bref

CVE-2008-3479 est une vulnérabilité CRITIQUE (CVSS 10.0).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 44.5%, plus élevée que 98.8% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

References

dvlabs.tippingpoint.com/advisory/TPTI-08-07 · Patch
marc.info
secunia.com/advisories/32260 · Patch
securityfocus.com/bid/31637 · Patch
securitytracker.com/id
us-cert.gov/cas/techalerts/TA08-288A.html · US Government Resource
vupen.com/english/advisories/2008/2816
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065
exchange.xforce.ibmcloud.com/vulnerabilities/45537
exchange.xforce.ibmcloud.com/vulnerabilities/45538
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free