PT-2008-2682 · Microsoft · Windows+1

Thomas Garnier · Publicado 2008-04-08 · Atualizado 2023-12-07 · CVE-2008-1084

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4 through Vista SP1 Microsoft Windows Server versions 2003 SP1 through 2008

Description The issue is related to improper input validation in the Windows kernel, allowing local users to execute arbitrary code. This could enable an attacker to run code with elevated privileges, potentially leading to complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights. One affected function is NtUserFnOUTSTRING in win32k.sys.

Recommendations For Microsoft Windows versions 2000 SP4 through Vista SP1, consider disabling the NtUserFnOUTSTRING function in win32k.sys as a temporary workaround until a patch is available. For Microsoft Windows Server versions 2003 SP1 through 2008, restrict access to the kernel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-1084

Produtos afetados

Windows

Windows Server

Referências · 15

• 🔥 https://exploit-db.com/exploits/31585 · Exploit
• 🔥 https://exploit-db.com/exploits/5518 · Exploit
• 🔥 http://securityfocus.com/bid/28554 · Exploit
• http://milw0rm.com/sploits/2008-ms08-25-exploit.zip · Nota
• http://secunia.com/advisories/29720 · Aviso do Fabricante
• http://securitytracker.com/id?1019803 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437 · Nota
• http://marc.info/?l=bugtraq&m=120845064910729&w=2 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-025 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1084 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA08-099A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1084 · Nota de Segurança
• http://vupen.com/english/advisories/2008/1149/references · Aviso do Fabricante
• https://t.me/cvenotify/62781 · Publicação no Telegram