VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2008· Updated Jun 16, 2026

CVE-2008-4268

CVE-2008-4268

Description

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Microsoft/Windows Server 20084 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
  • Microsoft/Windows3 versions
    cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
  • Microsoft/Windows Vistallm-fuzzy
    Range: Gold and SP1
  • Microsoft/Server 2008llm-fuzzy
  • Microsoft/Windows Searchllm-fuzzy

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.