Description
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
Published: 2008-10-23
Score: 10.0 Critical
EPSS: 93.5% High
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

No history.

Subscriptions

Microsoft Windows 2000 Windows Server 2003 Windows Server 2008 Windows Vista Windows Xp
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2024-08-07T10:08:34.970Z

Reserved: 2008-09-25T00:00:00.000Z

Link: CVE-2008-4250

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-10-23T22:00:01.357

Modified: 2026-04-23T00:35:47.467

Link: CVE-2008-4250

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses