Vulnerability in N/a
CVE-2008-0020
Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and…
EPSS: 0.510 (97.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- TA09-223A (x_refsource_CERT, third-party-advisory)
- blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-alread… (x_refsource_MISC)
- 36187 (x_refsource_SECUNIA, third-party-advisory)
- oval:org.mitre.oval:def:5850 (x_refsource_OVAL, signature, vdb-entry)
- ADV-2009-2232 (vdb-entry, x_refsource_VUPEN)
- MS09-037 (x_refsource_MS, vendor-advisory)
- 1022712 (vdb-entry, x_refsource_SECTRACK)
- 20090706 Multiple Microsoft Video Control ActiveX Remote Code Execution Vulnerabilities (x_refsource_ISS, third-party-advisory)
Frequently asked questions
- What is CVE-2008-0020?
- CVE-2008-0020 is a vulnerability in N/a. Published 2009-07-07.
- Is CVE-2008-0020 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.