← Back

CVE-2008-4269

nvd nist
Published: Dec 10, 2008Modified: Apr 23, 2026

JSON object

Loading...
8.5
Vector
AV:N/AC:M/Au:S/C:C/I:C/A:C
Exploitability: 6.8 / Impact: 10.0
Source: NVD

Description

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."

Affected (7)

Microsoft
2 products
Windows Server 2008
Windows Vista
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows Server 2008
All versions
Windows Server 2008
All versions
Windows Server 2008
All versions
Windows Server 2008
All versions
Microsoft
Windows Vista
All versions
Windows Vista
All versions
Windows Vista
All versions

Related CWEs

CWE-399
CWE-399

References (12)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
US Government Resource
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.