Description
Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka "Windows Saved Search Vulnerability."
References
- oval:org.mitre.oval:def:5600 vdb-entry signature
- MS08-038 vendor-advisory
- 30953 third-party-advisory
- 1020436 vdb-entry
- ADV-2008-2020 vdb-entry
- 30109 vdb-entry
- TA08-190A third-party-advisory