CVE-2008-0087: microsoft windows_2000 Use of Insufficiently Random Values

EPSS trend

Probability

32.45%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 32.45% on 18-09-2026

18-09-202618-10-2026

EPSS score

32.45%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.us-cert.gov/cas/techalerts/TA08-099A.htmlThird Party AdvisoryX Refsource CERTBroken LinkUS Government Resource
marc.info?l=bugtraq&m=120845064910729&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-020Vendor AdvisoryX Refsource MSPatch
secunia.com/advisories/29696Third Party AdvisoryX Refsource SECUNIABroken Link
www.trusteer.com/docs/windowsresolver.htmlX Refsource MISCBroken Link
www.securitytracker.com/id?1019802VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5314VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
www.vupen.com/english/advisories/2008/1144/referencesVDB EntryX Refsource VUPENBroken Link
www.securityfocus.com/archive/1/490575/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/28553VDB EntryX Refsource BIDBroken LinkPatchThird Party Advisory

Related vulnerabilities

CVE-2003-1048microsoftinternet_explorer+726.63%22y ago21-07-2004 04:00Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.CVE-2003-0907microsoftwindows_server_2003+121.85%22y ago16-04-2004 04:00Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.CVE-2003-0227microsoftwindows_2000+134.40%23y ago30-05-2003 04:00The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.CVE-2003-0904microsoftexchange_server+28.16%22y ago08-01-2004 05:00Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.CVE-2013-1332microsoftwindows_7+41.88%13y ago15-05-2013 01:00dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."CVE-2013-1286microsoftwindows_7+51.46%13y ago13-03-2013 00:00The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.

All vulnerabilities inwindows_2000 windows_server_2003 windows_vista windows_xp

CVE-2008-0087: microsoft windows_2000 Use of Insufficiently Random Values

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References