CVE-2008-5823: Medium severity Microsoft Money vulnerability
Published Jan 2, 2009
·Updated
An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.
Affected Software
6 affected components
Microsoft Money=2006
Microsoft Windows Vista
Microsoft Windows Vista=sp1
All of the following
Microsoft Money=2006
Any of the following
Microsoft Windows Vista
Microsoft Windows Vista=sp1
Event History
Jan 2, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·07:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5823?
CVE-2008-5823 has a medium severity rating due to its potential to cause denial of service.
2
How do I fix CVE-2008-5823?
To mitigate CVE-2008-5823, ensure that you do not use the vulnerable ActiveX control in untrusted environments.
3
Which software is affected by CVE-2008-5823?
CVE-2008-5823 specifically affects Microsoft Money 2006 when used on Windows Vista.
4
What type of vulnerability is CVE-2008-5823?
CVE-2008-5823 is classified as a denial of service vulnerability.
5
Can CVE-2008-5823 be exploited remotely?
Yes, CVE-2008-5823 can be exploited remotely through the use of the affected ActiveX control.