Unscored CVE-2008-4268 EUVD-2008-4251GHSA-vgvc-r466-8v67

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation …

Published Dec 10, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."

References

MS08-075 vendor-advisory
1021366 vdb-entry
33053 third-party-advisory
oval:org.mitre.oval:def:5853 vdb-entry signature
ADV-2008-3387 vdb-entry
TA08-344A third-party-advisory