CVEvulnerability
CVE-2008-1084
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows server 2008
• microsoft windows vista
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://marc.info/?l=bugtraq&m=120845064910729&w=2 marc.info
- http://milw0rm.com/sploits/2008-ms08-25-exploit.zip milw0rm.com
- http://secunia.com/advisories/29720 Vendor Advisory
- http://www.securityfocus.com/bid/28554 Exploit, Patch
- http://www.securitytracker.com/id?1019803 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA08-099A.html US Government Resource
- http://www.vupen.com/english/advisories/2008/1149/references Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437 oval.cisecurity.org
- https://www.exploit-db.com/exploits/5518 www.exploit-db.com
- http://marc.info/?l=bugtraq&m=120845064910729&w=2 marc.info
- http://milw0rm.com/sploits/2008-ms08-25-exploit.zip milw0rm.com
- http://secunia.com/advisories/29720 Vendor Advisory
- http://www.securityfocus.com/bid/28554 Exploit, Patch
- http://www.securitytracker.com/id?1019803 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA08-099A.html US Government Resource
- http://www.vupen.com/english/advisories/2008/1149/references Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437 oval.cisecurity.org
- https://www.exploit-db.com/exploits/5518 www.exploit-db.com