The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2024-08-07T10:08:34.970Z
Reserved: 2008-09-25T00:00:00
Link: CVE-2008-4250
No data.
Status : Deferred
Published: 2008-10-23T22:00:01.357
Modified: 2025-04-09T00:30:58.490
Link: CVE-2008-4250
No data.
OpenCVE Enrichment
No data.
Weaknesses