CVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
Other sources
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Microsoft Windows Video ActiveX Control (msvidctl.dll - MPEG2TuneRequest ActiveX control)from your environment.Discontinue use of the product or uninstall/disable the Video ActiveX Control if mitigations are unavailable.
- Compensating control
Apply mitigations per vendor instructions.
- Compensating control
Follow applicable BOD 22-01 guidance for cloud services.
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0015?
CVE-2008-0015 is rated as critical due to its capability for remote code execution.
How do I fix CVE-2008-0015?
To mitigate CVE-2008-0015, install the critical security updates provided by Microsoft.
Which versions of Windows are affected by CVE-2008-0015?
CVE-2008-0015 affects Microsoft Windows XP and Windows Server 2003 with specific service pack levels.
What type of vulnerability is CVE-2008-0015?
CVE-2008-0015 is a remote code execution vulnerability associated with the Microsoft Windows Video ActiveX Control.
How can an attacker exploit CVE-2008-0015?
An attacker can exploit CVE-2008-0015 by creating a specially crafted webpage that triggers the vulnerability when visited.