The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=122479227205998&w=2 | vendor-advisory x_refsource_HP |
| http://secunia.com/advisories/32247 | third-party-advisory x_refsource_SECUNIA |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5902 | vdb-entry signature x_refsource_OVAL |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 | vendor-advisory x_refsource_MS |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45541 | vdb-entry x_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45544 | vdb-entry x_refsource_XF |
| http://marc.info/?l=bugtraq&m=122479227205998&w=2 | vendor-advisory x_refsource_HP |
| http://www.vupen.com/english/advisories/2008/2812 | vdb-entry x_refsource_VUPEN |
| http://www.securityfocus.com/bid/31651 | vdb-entry x_refsource_BID |
| http://www.securitytracker.com/id?1021046 | vdb-entry x_refsource_SECTRACK |
| http://www.us-cert.gov/cas/techalerts/TA08-288A.html | third-party-advisory x_refsource_CERT |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 7.2 | HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| Hyperlink | Source | Resource |
|---|---|---|
| http://marc.info/?l=bugtraq&m=122479227205998&w=2 | secure@microsoft.com | N/A |
| http://secunia.com/advisories/32247 | secure@microsoft.com | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/31651 | secure@microsoft.com | Patch |
| http://www.securitytracker.com/id?1021046 | secure@microsoft.com | N/A |
| http://www.us-cert.gov/cas/techalerts/TA08-288A.html | secure@microsoft.com | US Government Resource |
| http://www.vupen.com/english/advisories/2008/2812 | secure@microsoft.com | N/A |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 | secure@microsoft.com | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45541 | secure@microsoft.com | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45544 | secure@microsoft.com | N/A |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5902 | secure@microsoft.com | N/A |