CVE-2008-5229

CVE-2008-5229 describes a stack-based buffer overflow in the iphlpapi.dll component of Microsoft Windows Vista Gold and SP1. This vulnerability allows local users within the Network Configuration Operator group to potentially gain privileges or cause a denial of service (system crash) by providing a large, invalid PrefixLength to the CreateIpForwardEntry2 method, such as through a "route add" command. The vulnerability has a CVSS score of 6.9, indicating a medium severity. It requires local access (AV:L) and medium attack complexity (AC:M), but could lead to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). While an exploit is listed on ExploitDB (EDB-32590), there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.