PT-2008-2682 · Microsoft · Windows+1

Thomas Garnier · Published 2008-04-08 · Updated 2023-12-07 · CVE-2008-1084

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4 through Vista SP1 Microsoft Windows Server versions 2003 SP1 through 2008

Description The issue is related to improper input validation in the Windows kernel, allowing local users to execute arbitrary code. This could enable an attacker to run code with elevated privileges, potentially leading to complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights. One affected function is NtUserFnOUTSTRING in win32k.sys.

Recommendations For Microsoft Windows versions 2000 SP4 through Vista SP1, consider disabling the NtUserFnOUTSTRING function in win32k.sys as a temporary workaround until a patch is available. For Microsoft Windows Server versions 2003 SP1 through 2008, restrict access to the kernel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-1084

Affected Products

Windows

Windows Server

References · 15

• 🔥 https://exploit-db.com/exploits/31585 · Exploit
• 🔥 https://exploit-db.com/exploits/5518 · Exploit
• 🔥 http://securityfocus.com/bid/28554 · Exploit
• http://secunia.com/advisories/29720 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=120845064910729&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1084 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1084 · Security Note
• http://vupen.com/english/advisories/2008/1149/references · Vendor Advisory
• http://milw0rm.com/sploits/2008-ms08-25-exploit.zip · Note
• http://securitytracker.com/id?1019803 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-025 · Note
• http://us-cert.gov/cas/techalerts/TA08-099A.html · Note
• https://t.me/cvenotify/62781 · Telegram Post