CVE-2008-3479: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 44.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

Affected products

• Microsoft Windows 2000: any version

Published 2008-10-15. Last modified 2026-06-16.