CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Microsoft, Windows, Office. Its EPSS score suggests a 17.4% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2008-3068
Severity
HIGH
CVSS
7.5
EPSS
17.40%
Microsoft Windows Office
Original NVD Description
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.