Microsoft

Windows Server 2008

3466 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2009-0081

  • EPSS 66.51%
  • Published 10.03.2009 20:30:00
  • Last modified 09.04.2025 00:30:58

The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote...

4

CVE-2009-0320

  • EPSS 0.91%
  • Published 28.01.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe...

7.2

CVE-2009-0243

  • EPSS 1.28%
  • Published 21.01.2009 20:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) inserting CD-ROM media, (2) inserting DVD media, (3) connecting a USB device,...

10

CVE-2008-4834

  • EPSS 73.95%
  • Published 14.01.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Tra...

10

CVE-2008-4835

  • EPSS 66.73%
  • Published 14.01.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets...

8.5

CVE-2008-4268

  • EPSS 50.34%
  • Published 10.12.2008 14:00:01
  • Last modified 09.04.2025 00:30:58

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search f...

8.5

CVE-2008-4269

  • EPSS 57.77%
  • Published 10.12.2008 14:00:01
  • Last modified 09.04.2025 00:30:58

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML docum...

9.3

CVE-2008-2249

  • EPSS 68.72%
  • Published 10.12.2008 14:00:00
  • Last modified 09.04.2025 00:30:58

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffe...

9.3

CVE-2008-3465

  • EPSS 45.75%
  • Published 10.12.2008 14:00:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WM...

9.3

CVE-2008-4037

Exploit
  • EPSS 73.93%
  • Published 12.11.2008 23:30:02
  • Last modified 09.04.2025 00:30:58

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as ...