PT-2008-3747 · Microsoft · Windows Server 2003+5

Thomas Garnier · Published 2008-10-14 · Updated 2019-10-09 · CVE-2008-2252

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2, XP SP3, Server 2003 SP1, Server 2003 SP2, Vista Gold, Vista SP1, Server 2008

Description: The issue arises from the Windows kernel's failure to properly validate input passed from user mode, allowing local users to gain privileges via a crafted application. This could enable an attacker to run code with elevated privileges, execute arbitrary code, and take complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations: For Microsoft Windows 2000 SP4, consider applying a patch to fix the kernel memory corruption issue. For Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, apply a patch to address the improper validation of input passed from user mode to the kernel. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-2252

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 13

• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2252 · Security Note
• http://securityfocus.com/bid/31652 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 · Vendor Advisory
• http://secunia.com/advisories/32247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2252 · Security Note
• http://vupen.com/english/advisories/2008/2812 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45543 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-061 · Note
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45544 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045 · Note
• http://securitytracker.com/id?1021046 · Note