CVE-2008-1445: microsoft windows-nt Improper Input Validation

EPSS trend

Probability

27.14%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 27.14% on 19-09-2026

19-09-202619-10-2026

EPSS score

27.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

www.vupen.com/english/advisories/2008/1782VDB EntryX Refsource VUPENBroken Link
www.securityfocus.com/bid/29584VDB EntryX Refsource BIDPatch
securitytracker.com/id?1020229VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/archive/1/493338/100/0/threadedMailing ListX Refsource BUGTRAQ
www.us-cert.gov/cas/techalerts/TA08-162B.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-035Vendor AdvisoryX Refsource MS
www.securityfocus.com/archive/1/493342/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/30586Third Party AdvisoryX Refsource SECUNIAPermissions RequiredVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4910VDB EntrySignatureX Refsource OVAL

Related vulnerabilities

CVE-2007-5348microsoftdigital_image_suite+1452.89%18y ago10-09-2008 15:00Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."CVE-2008-2246microsoftwindows_vista+132.06%18y ago13-08-2008 00:00Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.CVE-2008-1453microsoftwindows-nt2.39%18y ago12-06-2008 01:30The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets.CVE-2008-1457microsoftwindows_vista+136.27%18y ago13-08-2008 10:00The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.CVE-2008-1087microsoftwindows-nt56.60%18y ago08-04-2008 23:00Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."CVE-2008-1436microsoftwindows_vista+136.83%18y ago21-04-2008 17:00Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.

All vulnerabilities inwindows-nt

CVE-2008-1445: microsoft windows-nt Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References