Unscored CVE-2008-3479 EUVD-2008-3465GHSA-fh72-rfmx-8whj

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attacker…

Published Oct 15, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

References

SSRT080143 vendor-advisory
win-ms08kb951071-update(45538) vdb-entry
32260 third-party-advisory
MS08-065 vendor-advisory
win-msmq-rpc-code-execution(45537) vdb-entry
1021052 vdb-entry
http://dvlabs.tippingpoint.com/advisory/TPTI-08-07
TA08-288A third-party-advisory
oval:org.mitre.oval:def:5998 vdb-entry signature
31637 vdb-entry
ADV-2008-2816 vdb-entry