CVE-2008-4299

A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial…

published September 29, 2008

CVSS

—

EPSS

16%

Percentile

96.9

In the wild

Unconfirmed

What it is

A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.15858 · 96.9th percentile
Published: 2008-09-29T17:00Z

EPSS history

Timeline

29 SEP 17:00Z
A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial…
cvelistv5