01 Record

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 17.40% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 96.8% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2008-07-07 23:00Z18 YR AGO
Last updated: 2024-08-07 09:21Z2 YR AGO
Reserved: 2008-07-07
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 2d30f64818f718c3c1c15247bd778716922b18c5f161c48b19645ee341814908

05 Affected products

VendorProductVersionsPlatforms

microsoftaccessNot specified—

microsoftexcelNot specified—

microsoftfrontpageNot specified—

microsoftgrooveNot specified—

microsoftinfopathNot specified—

microsoftofficeNot specified—

microsoftoffice_communicatorNot specified—

microsoftonenoteNot specified—

microsoftoutlookNot specified—

microsoftpowerpointNot specified—

microsoftproject_professionalNot specified—

microsoftproject_standardNot specified—

microsoftpublisherNot specified—

microsoftsharepoint_designerNot specified—

microsoftvisio_professionalNot specified—

microsoftvisio_standardNot specified—

microsoftwindows_live_mailNot specified—

06 References

www.cynops.dehttps://www.cynops.de/advisories/AKLINK-SA-2008-003.txtx_refsource_MISC
securityreason.com3978http://securityreason.com/securityalert/3978third-party-advisoryx_refsource_SREASON
www.securityfocus.com20080709 Re: Unauthorized reading confirmation from Outlookhttp://www.securityfocus.com/archive/1/494101/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.securityfocus.com28548http://www.securityfocus.com/bid/28548vdb-entryx_refsource_BID
www.klink.namehttps://www.klink.name/security/aklink-sa-2008-004-office2007-signatures.txtx_refsource_MISC
www.cynops.dehttps://www.cynops.de/advisories/AKLINK-SA-2008-002.txtx_refsource_MISC
www.cynops.dehttps://www.cynops.de/advisories/AKLINK-SA-2008-004.txtx_refsource_MISC
www.securitytracker.com1019736http://www.securitytracker.com/id?1019736vdb-entryx_refsource_SECTRACK
www.securitytracker.com1019738http://www.securitytracker.com/id?1019738vdb-entryx_refsource_SECTRACK
www.klink.namehttps://www.klink.name/security/aklink-sa-2008-003-live-mail-smime.txtx_refsource_MISC
www.klink.namehttps://www.klink.name/security/aklink-sa-2008-002-outlook-smime.txtx_refsource_MISC
www.securitytracker.com1019737http://www.securitytracker.com/id?1019737vdb-entryx_refsource_SECTRACK
www.cynops.dehttps://www.cynops.de/techzone/http_over_x509.htmlx_refsource_MISC
www.securityfocus.com20080703 Unauthorized reading confirmation from Outlookhttp://www.securityfocus.com/archive/1/493947/100/0/threadedmailing-listx_refsource_BUGTRAQ