CVE-2008-0927: microsoft windows-nt Resource Management Errors

EPSS trend

Probability

70.05%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 70.05% on 19-09-2026

19-09-202619-10-2026

EPSS score

70.05%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoswindowsVerified
Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers Denial of Service
Maturity: poc

References

8 links

www.securityfocus.com/archive/1/491622/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.securitytracker.com/id?1019836VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/29805Third Party AdvisoryX Refsource SECUNIA
www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1X Refsource CONFIRMVendor Advisory
www.vupen.com/english/advisories/2008/1217/referencesVDB EntryX Refsource VUPENThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/41787VDB EntryX Refsource XFThird Party Advisory
www.securityfocus.com/bid/28757VDB EntryX Refsource BIDThird Party Advisory
www.exploit-db.com/exploits/5547ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2007-5348microsoftdigital_image_suite+1452.89%18y ago10-09-2008 15:00Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."CVE-2008-2246microsoftwindows_vista+132.06%18y ago13-08-2008 00:00Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.CVE-2008-1453microsoftwindows-nt2.39%18y ago12-06-2008 01:30The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets.CVE-2008-1457microsoftwindows_vista+136.27%18y ago13-08-2008 10:00The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.CVE-2008-1087microsoftwindows-nt56.60%18y ago08-04-2008 23:00Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."CVE-2008-1436microsoftwindows_vista+136.83%18y ago21-04-2008 17:00Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.

All vulnerabilities inwindows-nt

CVE-2008-0927: microsoft windows-nt Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References