VULNERABILITY INTELLIGENCE
CVE-2008-3648
CVSS score9.3 HIGH
EPSS probability21.97%
CISA KEVNot currently listed
Published2008-08-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')