PT-2008-3745 · Microsoft · Windows Server 2008+5

Paul Caton · Published 2008-10-14 · Updated 2023-12-07 · CVE-2008-2250

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008

Description: The issue arises from the Windows kernel's failure to properly validate window properties sent from a parent window to a child window during the creation of a new window. This allows local users to gain privileges via a crafted application. An attacker who successfully exploits this could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations: For Microsoft Windows 2000 SP4, update to a newer version to mitigate the risk. For Microsoft Windows XP SP2 and SP3, apply the relevant patch or update to a newer version. For Microsoft Windows Server 2003 SP1 and SP2, apply the relevant patch or update to a newer version. For Microsoft Windows Vista Gold and SP1, apply the relevant patch or update to a newer version. For Microsoft Windows Server 2008, apply the relevant patch or update to a newer version.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-2250

Affected Products

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

Windows

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2008-2250 · Security Note
• http://securityfocus.com/bid/31651 · Patch
• http://secunia.com/advisories/32247 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2250 · Security Note
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Note
• https://t.me/cvenotify/62783 · Telegram Post
• http://securitytracker.com/id?1021046 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-061 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45544 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5902 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45541 · Note
• http://vupen.com/english/advisories/2008/2812 · Note