Type Vulnerability
An attacker could exploit the vulnerability by constructing a specially crafted Web page. Known-exploited catalogue reports exploitation in the wild.
Microsoft · Code execution
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
CVE-2008-0015
What this means
This is rated high severity (8.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Microsoft Windows 2003 Server and Microsoft Windows Xp are in your estate, and treat that as the priority.
Full vendor description
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
Scoring and exploitation
8.8/ 10
CVSS 3.1 base scoreHigh
Exploitable over the network without any account, but only if a user takes an action, such as opening a file or link. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionRequiredUI:R
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
- Elevated attack likelihood (~76.6% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Not reported
- Listed product
- Microsoft Windows
Weaknesses
CWE-119CWE-121
Affected products ()
- Microsoft Windows 2003 Server
- Microsoft Windows Xp
Show the raw CPE strings (5)
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
References
20 links from the CVE record, grouped by site; the vendor's advisory comes first.
microsoft.com1 linkVendor advisory
- 972890.mspx (opens in a new tab)Vendor Advisory
blogs.technet.com1 link
isc.sans.org1 link
osvdb.org1 link
- 55651 (opens in a new tab)Broken Link
secunia.com1 link
- 36187 (opens in a new tab)Broken Link
csis.dk1 link
iss.net1 link
kb.cert.org1 link
- 180513 (opens in a new tab)US Government Resource
securityfocus.com2 links
- 35558 (opens in a new tab)Broken Link
- 35585 (opens in a new tab)Broken Link
securitytracker.com1 link
- id (opens in a new tab)Broken Link
us-cert.gov3 links
- TA09-187A.html (opens in a new tab)US Government Resource
- TA09-195A.html (opens in a new tab)US Government Resource
- TA09-223A.html (opens in a new tab)US Government Resource
vupen.com1 link
- 2232 (opens in a new tab)Broken Link
docs.microsoft.com2 links
- ms09-032 (opens in a new tab)Third Party Advisory
- ms09-037 (opens in a new tab)Third Party Advisory
oval.cisecurity.org3 links