CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-08-12

Last modified

2024-08-07

Weaknesses

CWE-94

Affected products

• Windows Xp (Microsoft)

References

• http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt
• http://www.nullcode.com.ar/ncs/crash/nsloo.htm
• http://www.securityfocus.com/bid/30636
• http://www.securitytracker.com/id?1020711
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44423