Unscored CVE-2008-4269 EUVD-2008-4252GHSA-hjfr-hcjv-f23h

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data ob…

Published Dec 10, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."

References

MS08-075 vendor-advisory
oval:org.mitre.oval:def:6110 vdb-entry signature
1021366 vdb-entry
33053 third-party-advisory
ADV-2008-3387 vdb-entry
TA08-344A third-party-advisory