CVE

Id
31201  
CVE No.
CVE-2008-1084  
Status
Candidate  
Description
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys.  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332660 31201 CVE-2008-1084 MILW0RM:5518  View
332661 31201 CVE-2008-1084 URL:http://www.milw0rm.com/exploits/5518  View
332662 31201 CVE-2008-1084 MISC:http://milw0rm.com/sploits/2008-ms08-25-exploit.zip  View
332663 31201 CVE-2008-1084 HP:HPSBST02329  View
332664 31201 CVE-2008-1084 URL:http://marc.info/?l=bugtraq&m=120845064910729&w=2  View
332665 31201 CVE-2008-1084 HP:SSRT080048  View
332666 31201 CVE-2008-1084 URL:http://marc.info/?l=bugtraq&m=120845064910729&w=2  View
332667 31201 CVE-2008-1084 MS:MS08-025  View
332668 31201 CVE-2008-1084 URL:http://www.microsoft.com/technet/security/bulletin/ms08-025.mspx  View
332669 31201 CVE-2008-1084 CERT:TA08-099A  View
332670 31201 CVE-2008-1084 URL:http://www.us-cert.gov/cas/techalerts/TA08-099A.html  View
332671 31201 CVE-2008-1084 BID:28554  View
332672 31201 CVE-2008-1084 URL:http://www.securityfocus.com/bid/28554  View
332673 31201 CVE-2008-1084 OVAL:oval:org.mitre.oval:def:5437  View
332674 31201 CVE-2008-1084 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5437  View
332675 31201 CVE-2008-1084 VUPEN:ADV-2008-1149  View
332676 31201 CVE-2008-1084 URL:http://www.vupen.com/english/advisories/2008/1149/references  View
332677 31201 CVE-2008-1084 SECTRACK:1019803  View
332678 31201 CVE-2008-1084 URL:http://www.securitytracker.com/id?1019803  View
332679 31201 CVE-2008-1084 SECUNIA:29720  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45955 JVNDB-2008-001265 Microsoft Office Project において任意のコードが実行可能な脆弱性 Microsoft Office Project には、遠隔の第三者により細工されたファイルを処理する際に任意のコードを実行される脆弱性が存在します。 CVE-2008-1088 31201 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001265.html  View