CVE-2008-5823 : An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windo

An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property.

Published 2009-01-02 19:30:02

Updated 2018-10-30 16:25:49

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2008-5823

EPSS FAQ

0.27%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 63 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-5823

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

Products affected by CVE-2008-5823

Microsoft » Money » Version: 2006
cpe:2.3:a:microsoft:money:2006:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Vista » Version: N/A
When used together with: Microsoft » Windows Vista » Version: N/A Update SP1

Vulnerability Details : CVE-2008-5823

Exploit prediction scoring system (EPSS) score for CVE-2008-5823

CVSS scores for CVE-2008-5823

CWE ids for CVE-2008-5823

References for CVE-2008-5823

Products affected by CVE-2008-5823