CVE-2008-4250
Published Oct 23, 2008
Last updated 2 months ago
AI description
CVE-2008-4250 describes a buffer overflow vulnerability found within the Server service of several Microsoft Windows operating systems. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability is triggered when a specially crafted Remote Procedure Call (RPC) request causes an overflow during the process of path canonicalization. This "Server Service Vulnerability" was actively exploited in the wild, notably by the Gimmiv.A malware, around October 2008. The affected software includes Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and Windows 7 Pre-Beta.
- Description
- The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
- Source
- secure@microsoft.com
- NVD status
- Analyzed
- Products
- windows_2000, windows_server_2003, windows_server_2008, windows_vista, windows_xp
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Data from CISA
- Vulnerability name
- Microsoft Windows Buffer Overflow Vulnerability
- Exploit added on
- May 20, 2026
- Exploit action due
- Jun 3, 2026
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Hype score
- Not currently trending
5 of CISA's 7 new KEV entries date to 2008-2010. CVE-2008-4250 (Conficker). CVE-2010-0249 (Aurora). Two 2026 Microsoft Defender CVEs join them. Your oldest unpatched endpoints are the easiest entry points. #EndpointSecurity #ITAdmin #CyberSecurity #CISA https://t.co/tqCii3yOiF
@triosoftinc
21 May 2026
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
米国サイバーセキュリティ・社会基盤安全保障庁(CISA)が既知の悪用された脆弱性カタログに7件追加。10年以上前のAcrobatのCVE-2009-3459及びMSのCVE-2008-4250、CVE-2009-1537、CVE-2010-0249、CVE-2010-0806、並びに多分RedSunのCVE-2
@__kokumoto
20 May 2026
1211 Impressions
0 Retweets
1 Like
1 Bookmark
1 Reply
1 Quote
🚨 Windows'ta Kritik Güvenlik Açığı: CVE-2008-4250 📅 20 Mayıs 2026 · 03:00 (TR) CISA, oldukça eski bir Windows açığı olan CVE-2008-4250'yi aktif istismar riski nedeniyle KEV listesine dahil etti. Sistemlerinizi korumak için üretici tarafından sağlanan yamal
@TheNetworkGhost
20 May 2026
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
🚨 7 new CISA KEV adds today CVE-2026-45498, CVE-2026-41091, CVE-2010-0806, CVE-2010-0249, CVE-2009-3459, CVE-2009-1537, CVE-2008-4250 https://t.co/0StDFCzdCI #boarnet #cybersecurity #cisakev #cve #threatintelligence #malware
@boarnetio
20 May 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
"matchCriteriaId": "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "E3C43D05-40F8-4769-BA6B-A376420EA972",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "43D64F8D-975A-4A5B-BEDF-D27D65C96A29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:*",
"matchCriteriaId": "8856A97B-4C43-45E5-B1DB-89EB9C350265",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "1D929AA2-EE0B-4AA1-805D-69BCCA11B77F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*",
"matchCriteriaId": "9F98AE07-3995-4501-9804-FEA5A87ADFAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*",
"matchCriteriaId": "A7371547-290D-4D0D-B98D-CA28B4D2E8B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:itanium:*",
"matchCriteriaId": "87842DF1-F3AC-4585-A117-904B936D5C9F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*",
"matchCriteriaId": "3A118DC8-CD3A-461F-867E-5174F24FBAE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*",
"matchCriteriaId": "1114016B-B51D-495D-96AC-A0E7992DA551",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7CAEEA81-5037-4B68-98D9-83AAEBC98E20",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "51160A46-6768-44D5-89CD-6DB9D2268A2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "3A04E39A-623E-45CA-A5FC-25DAA0F275A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*",
"matchCriteriaId": "889F98DA-4266-470B-AE3D-480BDF6BADB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*",
"matchCriteriaId": "4902A7BD-0645-4CAC-8EA8-24BD2D8B893A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
"matchCriteriaId": "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",
"matchCriteriaId": "C6109348-BC79-4ED3-8D41-EA546A540C79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*",
"matchCriteriaId": "C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]