CVE-2008-3479
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in...
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
- Record
CVE-2008-3479- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
- Record
CVE-2008-3479- Updated
- 2026-11-02
EUVDEUVD-2008-3465 No score
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
- Record
EUVD-2008-3465- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fh72-rfmx-8whj No score
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in...
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."
- Record
GHSA-fh72-rfmx-8whj- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3479 is a high vulnerability (CVSS 10.0) in Microsoft Windows 2000, published October 15, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 44.5%, the 98th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=122479227205998&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/45538
secunia.com/advisories/32260
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065
securitytracker.com/id?1021052
Show 7 moreShow less
dvlabs.tippingpoint.com/advisory/TPTI-08-07
us-cert.gov/cas/techalerts/TA08-288A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998
securityfocus.com/bid/31637
vupen.com/english/advisories/2008/2816
nvd.nist.gov/vuln/detail/CVE-2008-3479
github.com/advisories/GHSA-fh72-rfmx-8whj