CVE-2008-4268
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not...
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
- Record
CVE-2008-4268- CVSS 2.0
- 8.5 High
AV:N/AC:M/Au:S/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
- Record
CVE-2008-4268- Updated
- 2026-11-02
EUVDEUVD-2008-4251 No score
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
- Record
EUVD-2008-4251- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vgvc-r466-8v67 No score
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not...
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."
- Record
GHSA-vgvc-r466-8v67- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4268 is a high vulnerability (CVSS 8.5) in Microsoft Windows Vista, published December 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.7%, the 97th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-075
securitytracker.com/id?1021366
secunia.com/advisories/33053
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5853
vupen.com/english/advisories/2008/3387
us-cert.gov/cas/techalerts/TA08-344A.html
nvd.nist.gov/vuln/detail/CVE-2008-4268
github.com/advisories/GHSA-vgvc-r466-8v67