CVE-2008-3479

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

• CWE-20

• http://dvlabs.tippingpoint.com/advisory/TPTI-08-07Patch
• http://marc.info/?l=bugtraq&m=122479227205998&w=2
• http://secunia.com/advisories/32260Patch, Vendor Advisory
• http://www.securityfocus.com/bid/31637Patch
• http://www.securitytracker.com/id?1021052
• http://www.us-cert.gov/cas/techalerts/TA08-288A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/2816
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45537
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45538
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998
• http://dvlabs.tippingpoint.com/advisory/TPTI-08-07Patch
• http://marc.info/?l=bugtraq&m=122479227205998&w=2
• http://secunia.com/advisories/32260Patch, Vendor Advisory
• http://www.securityfocus.com/bid/31637Patch
• http://www.securitytracker.com/id?1021052
• http://www.us-cert.gov/cas/techalerts/TA08-288A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/2816
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45537
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45538
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998

Published

Oct 15, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3473Microsoft Internet Explorer 6 and 7 does not properly determ…
• CVE-2008-3474Microsoft Internet Explorer 6 and 7 does not properly determ…6.5
• CVE-2008-3475Microsoft Internet Explorer 6 does not properly handle error…8.8
• CVE-2008-3476Microsoft Internet Explorer 5.01 SP4 and 6 does not properly…
• CVE-2008-3477Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 doe…
• CVE-2008-3478Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-3480Stack-based buffer overflow in the Anzio Web Print Object (W…
• CVE-2008-3481themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.…
• CVE-2008-3482Cross-site scripting (XSS) vulnerability in the error page f…
• CVE-2008-3483Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2…
• CVE-2008-3484SQL injection vulnerability in eStoreAff 0.1 allows remote a…
• CVE-2008-3485Untrusted search path vulnerability in Citrix MetaFrame Pres…