7.2

CVE-2008-2251

Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka "Windows Kernel Unhandled Exception Vulnerability." NOTE: according to Microsoft, this is not a duplicate of CVE-2008-4510.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2000 Updatesp4
Microsoft ≫ Windows Server 2003 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp1
Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
Microsoft ≫ Windows Server 2003 Updatesp1 Editionx64
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionx64
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionx64
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionx64
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionx64
Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2003 Updatesp2
Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionitanium
Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx32
Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Editionx64
Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2
Microsoft ≫ Windows Xp Updatesp2 Editionx64
   Microsoft ≫ Windows Xp Updatesp2 Editionx64
   Microsoft ≫ Windows Xp Updatesp2 Editionx64
   Microsoft ≫ Windows Xp Updatesp2 Editionx64
   Microsoft ≫ Windows Xp Updatesp2 Editionx64
Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Updatesp3
Microsoft ≫ Windows Xp Updatex64
   Microsoft ≫ Windows Xp Updatex64
   Microsoft ≫ Windows Xp Updatex64
   Microsoft ≫ Windows Xp Updatex64
   Microsoft ≫ Windows Xp Updatex64
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.78% 0.73
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C