CVE-2008-1278

The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and...

5.0 MediumPublic exploit

The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted.

Exploit likelihood

7.34%Up 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2008-1278
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-1278
Updated: 2026-11-02

EUVDEUVD-2008-1286 No score

Record: EUVD-2008-1286
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p93c-4c5g-q7pf No score

The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and...

Record: GHSA-p93c-4c5g-q7pf
Weakness: CWE-20
Updated: 2026-11-02

Affected products

remotelyanywhere

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	RemotelyAnywhere 8.0.668 - 'Accept-Charset' Null Pointer Denial of Service	2008-03-10

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1278 is a medium vulnerability (CVSS 5.0) in Remotelyanywhere, published March 10, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.34%, the 94th percentile. No source names a fixed version.