CVE-2008-1087: microsoft windows-nt

EPSS trend

Probability

56.60%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 56.60% on 19-09-2026

19-09-202619-10-2026

EPSS score

56.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaselocalwindowsVerified
Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - GDI (EMR_COLORMATCHTOTARGETW) (MS08-021)
Maturity: weaponized

References

11 links

www.osvdb.org/44215VDB EntryX Refsource OSVDBBroken Link
www.us-cert.gov/cas/techalerts/TA08-099A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
marc.info?l=bugtraq&m=120845064910729&w=2Vendor AdvisoryX Refsource HPMailing List
www.vupen.com/english/advisories/2008/1145/referencesVDB EntryX Refsource VUPENBroken Link
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021Vendor AdvisoryX Refsource MS
www.securityfocus.com/bid/28570VDB EntryX Refsource BIDPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580VDB EntrySignatureX Refsource OVAL
www.exploit-db.com/exploits/6656ExploitX Refsource EXPLOIT DB
www.exploit-db.com/exploits/5442ExploitX Refsource EXPLOIT DB
www.securitytracker.com/id?1019798VDB EntryX Refsource SECTRACKThird Party Advisory

Show all 11 references

secunia.com/advisories/29704Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

CVE-2007-5348microsoftdigital_image_suite+1452.89%18y ago10-09-2008 15:00Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."CVE-2008-2246microsoftwindows_vista+132.06%18y ago13-08-2008 00:00Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.CVE-2008-1453microsoftwindows-nt2.39%18y ago12-06-2008 01:30The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets.CVE-2008-1457microsoftwindows_vista+136.27%18y ago13-08-2008 10:00The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.CVE-2008-1436microsoftwindows_vista+136.83%18y ago21-04-2008 17:00Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.CVE-2008-1445microsoftwindows-nt27.14%18y ago12-06-2008 01:30Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.

All vulnerabilities inwindows-nt

CVE-2008-1087: microsoft windows-nt

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References