MSRXVulnerabilities / CVE-2008-0015
CVE-2008-0015
Published 2009-07-07 · published (not yet in NVD)
CVE-2008-0015
Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2026-02-17, with a fix-by date of 2026-03-10. Patch it first.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
8.8 HIGH
CVSS 3.1 · CNA
CVSS 3.1 · CNA
77%
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
Scores
Affected products
- n/a n/a: n/a
20 references (advisories, patches, write-ups)
- http://www.securityfocus.com/bid/35558 · vdb-entry, x_refsource_BID
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html · third-party-advisory, x_refsource_CERT
- http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx · x_refsource_MISC
- http://osvdb.org/55651 · vdb-entry, x_refsource_OSVDB
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6333 · vdb-entry, signature, x_refsource_OVAL
- http://www.securityfocus.com/bid/35585 · vdb-entry, x_refsource_BID
- http://secunia.com/advisories/36187 · third-party-advisory, x_refsource_SECUNIA
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-032 · vendor-advisory, x_refsource_MS
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7436 · vdb-entry, signature, x_refsource_OVAL
- http://www.vupen.com/english/advisories/2009/2232 · vdb-entry, x_refsource_VUPEN
- http://www.securitytracker.com/id?1022514 · vdb-entry, x_refsource_SECTRACK
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 · vendor-advisory, x_refsource_MS
- http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799 · x_refsource_MISC
- http://isc.sans.org/diary.html?storyid=6733 · x_refsource_MISC
- http://www.us-cert.gov/cas/techalerts/TA09-187A.html · third-party-advisory, x_refsource_CERT
- http://www.microsoft.com/technet/security/advisory/972890.mspx · x_refsource_CONFIRM
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html · third-party-advisory, x_refsource_CERT
- http://www.iss.net/threats/329.html · third-party-advisory, x_refsource_ISS
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6363 · vdb-entry, signature, x_refsource_OVAL
- http://www.kb.cert.org/vuls/id/180513 · third-party-advisory, x_refsource_CERT-VN
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.