The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=122479227205998&w=2 | vendor-advisory x_refsource_HP |
| http://secunia.com/advisories/32247 | third-party-advisory x_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45543 | vdb-entry x_refsource_XF |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 | vendor-advisory x_refsource_MS |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045 | vdb-entry signature x_refsource_OVAL |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45544 | vdb-entry x_refsource_XF |
| http://marc.info/?l=bugtraq&m=122479227205998&w=2 | vendor-advisory x_refsource_HP |
| http://www.vupen.com/english/advisories/2008/2812 | vdb-entry x_refsource_VUPEN |
| http://www.securitytracker.com/id?1021046 | vdb-entry x_refsource_SECTRACK |
| http://www.us-cert.gov/cas/techalerts/TA08-288A.html | third-party-advisory x_refsource_CERT |
| http://www.securityfocus.com/bid/31652 | vdb-entry x_refsource_BID |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|