What is CVE-2008-3479?

CVE-2008-3479 is a vulnerability in Microsoft Windows 2000, classified under Improper Input Validation. Published 2008-10-15.

Is CVE-2008-3479 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Microsoft Windows 2000

CVE-2008-3479

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2008-10-15 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.445 (98.7th percentile), scored 2026-10-02.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.445 · newest: 0.445 · change: 0.000

Affected products

Microsoft Windows 2000

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

saikumar326/TASK1-PORT-SCANNING

References

marc.info/ (vendor-advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/45538 (vdb-entry)
secunia.com/advisories/32260 (Patch, Vendor Advisory, third-party-advisory)
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065 (vendor-advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/45537 (vdb-entry)
www.securitytracker.com/id (vdb-entry)
dvlabs.tippingpoint.com/advisory/TPTI-08-07 (Patch)
www.us-cert.gov/cas/techalerts/TA08-288A.html (US Government Resource, third-party-advisory)
oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:5998 (signature, vdb-entry)
www.securityfocus.com/bid/31637 (Patch, vdb-entry)

Frequently asked questions

What is CVE-2008-3479?: CVE-2008-3479 is a vulnerability in Microsoft Windows 2000, classified under Improper Input Validation. Published 2008-10-15.
Is CVE-2008-3479 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.