CVE-2008-1084 Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vect...
HighCVSS 7.2
EPSS 6.8%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- SSRT080048 vendor-advisory
- milw0rm.com
- 29720 third-party-advisory vendor-advisory
- 28554 exploit patch vdb-entry
- 1019803 vdb-entry
- TA08-099A third-party-advisory us-government-resource
- ADV-2008-1149 vdb-entry vendor-advisory
- MS08-025 vendor-advisory
- oval:org.mitre.oval:def:5437 signature vdb-entry
- 5518 exploit