Unscored severity · published Aug 12, 2008
CVE-2008-3648
nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in…
–
CVSS
22%
EPSS
No
On KEV
Description
nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
Exploitation
Is it being used?
Exploit prediction (EPSS)22.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3648
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3648
packetstormsecurity.org
http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt
Exploit
http://www.nullcode.com.ar/ncs/crash/nsloo.htm
www.securityfocus.com
http://www.securityfocus.com/bid/30636
www.securitytracker.com
http://www.securitytracker.com/id?1020711
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44423
More from Windows XP
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2013-3918
Microsoft Windows Out-of-Bounds Write Vulnerability
8.8
CVE-2011-3402
Microsoft Windows Remote Code Execution Vulnerability
8.8
CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability