CVE-2008-0083

Windows 2000, 2003 Server, XP - Remote Code Execution via Script Decoding Flaw

Title source: llm
STIX 2.1

Description

The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.

References (8)

Core 8
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-099A.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=120845064910729&w=2
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28551
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1146/references
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019799
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5495
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29712

Scores

EPSS 0.2996
EPSS Percentile 98.0%

Details

CWE
CWE-94
Status published
Products (3)
microsoft/windows_2000
microsoft/windows_2003_server (6 CPE variants)
microsoft/windows_xp (3 CPE variants)
Published Apr 08, 2008
Tracked Since Feb 18, 2026