EXPOSURES › CVE-2008-0015
CVE-2008-0015
HIGH ⌖ ON CISA KEV · EXPLOITEDCVE-2008-0015: RCE in Windows Video ActiveX Control exploited in the wild
An unpatched remote code execution vulnerability in Microsoft's Windows Video ActiveX Control was actively exploited, allowing attackers to execute arbitrary code with the privileges of the logged-on user.
Shame score — Active exploitation of a known, unpatched vulnerability in a widely-used product.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |