CVE-2008-4300

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash)…

published September 29, 2008

CVSS

—

EPSS

14%

Percentile

96.5

In the wild

Unconfirmed

What it is

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13555 · 96.5th percentile
Published: 2008-09-29T17:00Z

EPSS history

Timeline

29 SEP 17:00Z
A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash)…
cvelistv5