CVE-2008-4250

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2026-05-20. Federal remediation due 2026-06-03.

SSVC decision

• ExploitationactiveCISA reports credible evidence of active exploitation.
• AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
• Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

98.75% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.9% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-16.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2008-10-23 21:00Z17 YR AGO

Last updated

2026-05-21 03:55Z3 MO AGO

Reserved

2008-09-25

Assigning CNA

microsoft

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
• CWE-94Improper Control of Generation of Code ('Code Injection')Base

Data version

5.2

Document digest

2eea08770432520289b4100ffecd743e19fd0d9f2db37536daeb7cb6c680beb5

• marc.infoSSRT080164http://marc.info/?l=bugtraq&m=122703006921213&w=2vendor-advisoryx_refsource_HP
• secunia.com32326http://secunia.com/advisories/32326third-party-advisoryx_refsource_SECUNIA
• www.kb.cert.orgVU#827267http://www.kb.cert.org/vuls/id/827267third-party-advisoryx_refsource_CERT-VN
• www.securitytracker.com1021091http://www.securitytracker.com/id?1021091vdb-entryx_refsource_SECTRACK
• www.exploit-db.com7132https://www.exploit-db.com/exploits/7132exploitx_refsource_EXPLOIT-DB
• www.exploit-db.com6841https://www.exploit-db.com/exploits/6841exploitx_refsource_EXPLOIT-DB
• www.securityfocus.com31874http://www.securityfocus.com/bid/31874vdb-entryx_refsource_BID
• docs.microsoft.comMS08-067https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067vendor-advisoryx_refsource_MS
• blogs.securiteam.comhttp://blogs.securiteam.com/index.php/archives/1150x_refsource_MISC
• www.exploit-db.com6824https://www.exploit-db.com/exploits/6824exploitx_refsource_EXPLOIT-DB
• www.vupen.comADV-2008-2902http://www.vupen.com/english/advisories/2008/2902vdb-entryx_refsource_VUPEN
• exchange.xforce.ibmcloud.comwin-server-rpc-code-execution(46040)https://exchange.xforce.ibmcloud.com/vulnerabilities/46040vdb-entryx_refsource_XF
• www.securityfocus.com20081026 Windows RPC MS08-067 FAQ document releasedhttp://www.securityfocus.com/archive/1/497808/100/0/threadedmailing-listx_refsource_BUGTRAQ
• www.us-cert.govTA08-297Ahttp://www.us-cert.gov/cas/techalerts/TA08-297A.htmlthird-party-advisoryx_refsource_CERT
• www.exploit-db.com7104https://www.exploit-db.com/exploits/7104exploitx_refsource_EXPLOIT-DB
• www.us-cert.govTA09-088Ahttp://www.us-cert.gov/cas/techalerts/TA09-088A.htmlthird-party-advisoryx_refsource_CERT
• oval.cisecurity.orgoval:org.mitre.oval:def:6093https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093vdb-entrysignaturex_refsource_OVAL
• www.securityfocus.com20081027 Windows RPC MS08-067 FAQ document updatedhttp://www.securityfocus.com/archive/1/497816/100/0/threadedmailing-listx_refsource_BUGTRAQ
• www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4250government-resource