CVE Vulnerability

CVE-2008-2252

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."

7.2 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://www.securityfocus.com/bid/31652 Patch Third Party Advisory
http://secunia.com/advisories/32247 Patch Vendor Advisory
http://www.securitytracker.com/id?1021046 Third Party Advisory VDB Entry
http://marc.info/?l=bugtraq&m=122479227205998&w=2 Mailing List Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-288A.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2008/2812 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/45544 VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45543 VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045 Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:x64:*
Information

Published : 2008-10-15 12:12

Updated : 2019-10-09 10:55

NVD link : CVE-2008-2252

Mitre link : CVE-2008-2252

Products Affected
No products.
CWE
CWE-20