VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2008· Updated Jun 16, 2026

CVE-2008-4269

CVE-2008-4269

Description

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Microsoft/Windows Server 20084 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
  • Microsoft/Windows3 versions
    cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
  • Microsoft/Windows Vistallm-fuzzy
    Range: Gold and SP1
  • Microsoft/Server 2008llm-fuzzy
    Range: Gold and SP1
  • Microsoft/Windows Searchllm-fuzzy
    Range: Vista Gold and SP1, Server 2008

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.