| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| MS08-061 | Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (954211) | Microsoft Windows | Critical | 15-10-2008 |
Technical Information
Brief overview of the risk:
An elevation of privilege vulnerability exists because the Windows kernel does not properly validate properties of a window passed during the new window creation process.
Detailed Information on the risk:
An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Further information on this exploit is available at : MS08-061
Affected Software
Microsoft Windows 2000 Service Pack 4Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 Service Pack 2
Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
Microsoft Windows Server 2003 with SP2 for Itanium-based Systems
Microsoft Windows Server 2003 x64 Edition
Microsoft Windows Server 2003 x64 Edition Service Pack 2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional x64 Edition Service Pack 2
Microsoft Windows XP Service Pack 2
Microsoft Windows XP Service Pack 3
Windows Server 2008 for 32-bit Systems
Windows Server 2008 for Itanium-based Systems
Windows Server 2008 for x64-based Systems
Windows Vista
Windows Vista Service Pack 1
Windows Vista x64 Edition
Windows Vista x64 Edition Service Pack 1