CVE-2008-2547

State: Published
Severity: Not scored
Published: Jun 4, 2008
Updated: Aug 7, 2024
Reserved: Jun 4, 2008

Description

Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) option. NOTE: this issue might cross privilege boundaries if msiexec.exe is reachable via components such as ActiveX controls, and might additionally require a separate vulnerability in the control.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20080603 RE: Windows Installer msiexec GUID Buffer Overflowmailing-list
win-msiexec-bo(42887)vdb-entry
20080603 Re: Windows Installer msiexec GUID Buffer Overflowmailing-list
http://www.aushack.com/200806-msiexec.txt
20080603 Windows Installer msiexec GUID Buffer Overflowmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.