Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2008-0015
n/a n/a — Microsoft Windows
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L N R U H H H 8.8 .7658 99.5 YES
AFFECTED
Product Versions Fixed
n/a n/a – —
TIMELINE
Dec 13 Reserved by mitre
Jul 7 Published (CNA: mitre)
Feb 17 Added to CISA KEV, remediation due 2026-03-10
Description
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka "Microsoft Video ActiveX Control Vulnerability."
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| December 13, 2007 | Reserved | Reserved by mitre |
| July 7, 2009 | Published | Published (CNA: mitre) |
| February 17, 2026 | KEV ADDED | Added to CISA KEV, remediation due 2026-03-10 |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| n/a | n/a | — | n/a | — |
References (21)
- http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx [x_refsource_MISC]
- http://isc.sans.org/diary.html?storyid=6733 [x_refsource_MISC]
- http://osvdb.org/55651 [vdb-entry, x_refsource_OSVDB]
- http://secunia.com/advisories/36187 [third-party-advisory, x_refsource_SECUNIA]
- http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799 [x_refsource_MISC]
- http://www.iss.net/threats/329.html [third-party-advisory, x_refsource_ISS]
- http://www.kb.cert.org/vuls/id/180513 [third-party-advisory, x_refsource_CERT-VN]
- http://www.microsoft.com/technet/security/advisory/972890.mspx [x_refsource_CONFIRM]
- http://www.securityfocus.com/bid/35558 [vdb-entry, x_refsource_BID]
- http://www.securityfocus.com/bid/35585 [vdb-entry, x_refsource_BID]
- http://www.securitytracker.com/id?1022514 [vdb-entry, x_refsource_SECTRACK]
- http://www.us-cert.gov/cas/techalerts/TA09-187A.html [third-party-advisory, x_refsource_CERT]
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html [third-party-advisory, x_refsource_CERT]
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html [third-party-advisory, x_refsource_CERT]
- http://www.vupen.com/english/advisories/2009/2232 [vdb-entry, x_refsource_VUPEN]
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-032 [vendor-advisory, x_refsource_MS]
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 [vendor-advisory, x_refsource_MS]
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6333 [vdb-entry, signature, x_refsource_OVAL]
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6363 [vdb-entry, signature, x_refsource_OVAL]
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7436 [vdb-entry, signature, x_refsource_OVAL]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-0015 [government-resource]
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2008-0015 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
