CVE-2008-4250
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista...
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
Exploit likelihood
What each source reports
CVE List
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
- Record
CVE-2008-4250- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2008-4233
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
- Record
EUVD-2008-4233- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3v68-r58v-m4c2
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista...
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
- Record
GHSA-3v68-r58v-m4c2- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-94, CWE-119
- Updated
- 2026-11-02
CISA KEV No score
Microsoft Windows Buffer Overflow Vulnerability
Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.
- Record
CVE-2008-4250- Weakness
- CWE-94
- Updated
- 2026-11-02
NVD
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
- Record
CVE-2008-4250- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-94, CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Server - Code Execution (PoC) (MS08-067) | 2008-10-23 |
| Exploit-DB | Microsoft Windows Server - Universal Code Execution (MS08-067) | 2008-10-26 |
| Metasploit | MS08-067 Microsoft Server Service Relative Path Stack Corruption | 2008-10-28 |
| Exploit-DB | Microsoft Windows Server - Code Execution (MS08-067) | 2008-11-12 |
| Exploit-DB | Microsoft Windows Server 2000/2003 - Code Execution (MS08-067) | 2008-11-16 |
| Exploit-DB | Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) (Metasploit) | 2011-01-21 |
| Exploit-DB | Microsoft Windows - 'NetAPI32.dll' Code Execution (Python) (MS08-067) | 2016-02-26 |
| PoC in GitHub | thunderstrike9090/Conflicker_analysis_scripts | 2018-10-18 |
| PoC in GitHub | NoTrustedx/Exploit_MS08-067 | 2025-06-02 |
| PoC in GitHub | BinRacer/ms08-067 | 2025-09-06 |
| PoC in GitHub | BinRacer/ms08-067.py | 2025-09-06 |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4250 is a high vulnerability (CVSS 10.0) in Microsoft Windows, published October 23, 2008. CISA lists it as known to be exploited, since May 20, 2026. EUVD reports exploitation since May 20, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 98.8%, the 99th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=122703006921213&w=2
secunia.com/advisories/32326
kb.cert.org/vuls/id/827267
securitytracker.com/id?1021091
exploit-db.com/exploits/7132
Show 15 moreShow less
securityfocus.com/bid/31874
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067
blogs.securiteam.com/index.php/archives/1150
vupen.com/english/advisories/2008/2902
exchange.xforce.ibmcloud.com/vulnerabilities/46040
us-cert.gov/cas/techalerts/TA08-297A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-4250
nvd.nist.gov/vuln/detail/CVE-2008-4250
github.com/advisories/GHSA-3v68-r58v-m4c2