CVE-2008-4300

A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.

• http://securityreason.com/securityalert/4325Exploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/496696/100/0/threadedExploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45584Third Party Advisory, VDB Entry
• http://securityreason.com/securityalert/4325Exploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/496696/100/0/threadedExploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45584Third Party Advisory, VDB Entry

Published

Sep 29, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4294IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cache…
• CVE-2008-4295Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 812…
• CVE-2008-4296The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" …
• CVE-2008-4297Mercurial before 1.0.2 does not enforce the allowpull permis…
• CVE-2008-4298Memory leak in the http_request_parse function in request.c …
• CVE-2008-4299A certain ActiveX control in the Microsoft Internet Authenti…
• CVE-2008-4301A certain ActiveX control in iisext.dll in Microsoft Interne…
• CVE-2008-4302fs/splice.c in the splice subsystem in the Linux kernel befo…5.5
• CVE-2008-4303Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3,…
• CVE-2008-4304general/login.php in phpCollab 2.5 rc3 and earlier allows re…
• CVE-2008-4305Static code injection vulnerability in installation/setup.ph…
• CVE-2008-4306Buffer overflow in enscript before 1.6.4 has unknown impact …