CVE-2008-5229 | BDVDB-2026-33566 Detail
Description#
Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service (system crash) via a large invalid PrefixLength to the CreateIpForwardEntry2 method, as demonstrated by a "route add" command. NOTE: this issue might not cross privilege boundaries.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/498650/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46742
- http://www.securityfocus.com/archive/1/498471/100/0/threaded
- http://secunia.com/advisories/32791
- http://securitytracker.com/id?1021245
- http://securityreason.com/securityalert/4646
- http://www.securityfocus.com/bid/32357
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.