CVE-2008-1436: microsoft windows_vista
Vulnerability summary
CVE-2008-1436 is a high (CVSS 9.0) vulnerability in microsoft windows_vista. EPSS estimates a 36.83% chance of exploitation in the next 30 days, higher than 98.4% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 21-04-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
36.83%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 36.83% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundMicrosoft Windows Server 2003 - Token Kidnapping Local Privilege Escalation
Maturity: weaponized
Microsoft Windows - 'SeImpersonatePrivilege' Local Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft2 products
- windows_vistana
- windows-ntvista:sp1 | vista:sp2
1 vendor · 2 products
References
20 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5891VDB EntrySignatureX Refsource OVAL
www.microsoft.com/technet/security/advisory/951306.mspxX Refsource CONFIRM- securitywatch.eweek.com/flaws/…X Refsource MISC
- www.us-cert.gov/cas/techalerts/TA09-104A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
Show all 20 references
- www.argeniss.com/research/TokenKidnapping.pdfX Refsource MISC
- www.argeniss.com/research/Churrasco.zipX Refsource MISC
- docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012Vendor AdvisoryX Refsource MS
- isc.sans.org/diary.html?storyid=4306X Refsource MISC
- milw0rm.com/sploits/2008-Churrasco.zipX Refsource MISC