CVE-2008-1440: microsoft windows_server_2003

EPSS trend

Probability

22.59%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 22.59% on 19-09-2026

19-09-202619-10-2026

EPSS score

22.59%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036Vendor AdvisoryX Refsource MSPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5473VDB EntrySignatureX Refsource OVALBroken Link
www.vupen.com/english/advisories/2008/1783VDB EntryX Refsource VUPENBroken Link
www.us-cert.gov/cas/techalerts/TA08-162B.htmlThird Party AdvisoryX Refsource CERTBroken LinkUS Government Resource
secunia.com/advisories/30587Third Party AdvisoryX Refsource SECUNIABroken LinkPermissions RequiredVendor Advisory
www.securityfocus.com/bid/29508VDB EntryX Refsource BIDBroken LinkPatchThird Party Advisory
securitytracker.com/id?1020230VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory

Related vulnerabilities

CVE-2003-1048microsoftinternet_explorer+726.63%22y ago21-07-2004 04:00Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.CVE-2003-0907microsoftwindows_server_2003+121.85%22y ago16-04-2004 04:00Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.CVE-2003-0904microsoftexchange_server+28.16%22y ago08-01-2004 05:00Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.CVE-2013-5056microsoftwindows_7+920.35%12y ago11-12-2013 00:00Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that is visited with Internet Explorer, aka "Use-After-Free Vulnerability in Microsoft Scripting Runtime Object Library."CVE-2013-5058microsoftwindows_7+92.76%12y ago11-12-2013 00:00Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted application, aka "Win32k Integer Overflow Vulnerability."CVE-2013-3940microsoftwindows_7+934.45%12y ago13-11-2013 00:00Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image in a Windows Write (.wri) document, which is not properly handled in WordPad, aka "Graphics Device Interface Integer Overflow Vulnerability."

All vulnerabilities inwindows_server_2003

CVE-2008-1440: microsoft windows_server_2003

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References