CVE-2008-4038

Description

Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka SMB Buffer Underflow Vulnerability.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

67.894

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows 2000 (KB957095)	Windows
Security Update for Windows XP (KB957095) x86 based systems	Windows
Security Update for Windows XP (KB957095) x86 based systems for SP3	Windows
Security Update for Windows Server 2003 (KB957095) x86 based systems	Windows
Security Update for Windows Server 2003 (KB957095) x86 based systems for SP2	Windows
Security Update for Windows Vista (KB957095) x86 based systems	Windows
Security Update for Windows Vista (KB957095) x86 based systems for SP1	Windows
Security Update for Windows XP x64 Edition (KB957095)	Windows
Security Update for Windows Server 2003 x64 Edition (KB957095)	Windows
Security Update for Windows Server 2003 x64 Edition (KB957095) for SP2	Windows
Security Update for Windows Server 2008 (KB957095)	Windows
Security Update for Windows Server 2008 x64 Edition (KB957095)	Windows
Security Update for Windows Vista for x64-based Systems (KB957095)	Windows
Security Update for Windows Vista for x64-based Systems (KB957095) for SP1	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-6506	Security Update for Windows Vista (KB957095)
PATCH-6508	Security Update for Windows Server 2003 x64 Edition (KB957095)
PATCH-6509	Security Update for Windows Server 2003 x64 Edition (KB957095)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234