Unscored CVE-2008-2252 EUVD-2008-2249GHSA-6r9m-v2c8-3rpw

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly va…

Published Oct 15, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."

References

SSRT080143 vendor-advisory
32247 third-party-advisory
win-kernel-input-privilege-escalation(45543) vdb-entry
MS08-061 vendor-advisory
oval:org.mitre.oval:def:6045 vdb-entry signature
win-ms08kb954211-update(45544) vdb-entry
ADV-2008-2812 vdb-entry
1021046 vdb-entry
TA08-288A third-party-advisory
31652 vdb-entry