CVE-2008-4250 high

Description

Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization. Added to KEV: 2026-05-20. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-06-03.

Indicators of Compromise (2)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (20)

• Permissions Required CISA KEV CVEs
• Issue Tracking, Mailing List, Third Party Advisory CISA KEV CVEs
• Patch, Vendor Advisory CISA KEV CVEs
• Third Party Advisory, US Government Resource CISA KEV CVEs
• Third Party Advisory, VDB Entry CISA KEV CVEs
• Third Party Advisory, VDB Entry CISA KEV CVEs
• Exploit, Patch, Third Party Advisory, VDB Entry CISA KEV CVEs
• Third Party Advisory, VDB Entry CISA KEV CVEs
• Third Party Advisory, US Government Resource CISA KEV CVEs
• Third Party Advisory, US Government Resource CISA KEV CVEs
• Vendor Advisory CISA KEV CVEs
• Patch, Vendor Advisory CISA KEV CVEs
• Third Party Advisory, VDB Entry CISA KEV CVEs
• CISA notes reference CISA KEV CVEs
• NVD detail: CVE-2008-4250 CISA KEV CVEs

  Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.

• Third Party Advisory CISA KEV CVEs
• Exploit, Third Party Advisory, VDB Entry CISA KEV CVEs
• Exploit, Third Party Advisory, VDB Entry CISA KEV CVEs
• Exploit, Third Party Advisory, VDB Entry CISA KEV CVEs
• Exploit, Third Party Advisory, VDB Entry CISA KEV CVEs

• CISA Warns of Active Exploit in Windows RPC Flaw CVE-2008-4250
  web:cybersixt.com

  CISA has added CVE‑2008‑4250 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Windows and is identified as the Microsoft Windows Buffer Overflow Vulnerability. It allows a remote attacker to execute arbitrary code by sending a specially crafted RPC request that triggers a buffer overflow during path canonicalisation in the Windows Server Service.

  2026-05-20 22:08 UTC
• Windows, Remote Code Execution, CVE-2008-4250 (Critical)
  web:dailycve.com

  Windows, Remote Code Execution, CVE-2008-4250 (Critical) - "DailyCVE.com - The advanced vulnerability database with modern testing, patching tutorials, and

  2026-05-20 22:08 UTC
• Microsoft Defender Vulnerability Management - Microsoft Defender ...
  web:learn.microsoft.com

  Microsoft Defender Vulnerability Management uses a risk-based approach to the discovery, prioritization, and remediation of endpoint vulnerabilities and misconfigurations.

  2026-05-20 22:08 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-20 22:08 UTC
• CVE-2008-4250 - Microsoft Windows Buffer Overflow Vulnerability
  web:www.scyscan.com

  Description Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.

  2026-05-20 22:08 UTC
• CVE Record: CVE-2008-4250
  web:www.cve.org

  Description The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008 , and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008 , aka "Server Service Vulnerability."

  2026-05-20 22:08 UTC
• KB5082417 - Details, Issues, & Feedback - NinjaOne
  web:www.ninjaone.com

  The update is delivered through standard Windows Update channels and is recommended as part of regular maintenance routines. The patch resolves six distinct security vulnerabilities ranging from remote code execution to information disclosure issues, alongside reliability enhancements for Windows Communication Foundation (WCF) services.

  2026-05-20 22:08 UTC
• Map of CVE to Advisory/Alert - Oracle
  web:www.oracle.com

  Map of CVE to Advisory/Alert The following table, updated to include the April 21, 2026 Critical Patch Update, maps CVEs to specific Critical Patch Update Advisories or Security alerts for CVEs greater than CVE -2021-0000.

  2026-05-20 22:08 UTC
• CISA Required Action
  CISA KEV (via KEVin)

  Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-06-03

  2026-05-20 22:08 UTC

Only Available for Registered Users. Sign in to view.