GCVE - cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*

part: o version: - update: r2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Server 2008 (`d1059944-7e5e-56c5-b342-3a28769f9212`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	x64
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-29056`	vulnerable	2026-06-08 06:33:28.535572	Windows Authentication Elevation of Privilege Vulnerability MEDIUM (4.3) Windows Authentication Elevation of Privilege Vulnerability Published: 2024-04-09T17:01:23.210Z Updated: 2025-05-03T00:40:24.811Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29056	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4792`	not_vulnerable	2026-06-08 05:02:52.656218	Details available Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012. Published: 2012-12-30T18:00:00.000Z Updated: 2025-10-22T00:05:45.500Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008 http://www.kb.cert.org/vuls/id/154201 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3227`	vulnerable	2026-06-08 04:55:13.749801	Details available Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability." Published: 2010-10-26T21:00:00.000Z Updated: 2024-08-07T03:03:18.722Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1024557 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6696 http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100705-%281%29 http://www.exploit-db.com/exploits/13921/ https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0025`	vulnerable	2026-06-08 04:51:52.367908	Details available The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability." Published: 2010-04-14T15:44:00.000Z Updated: 2024-08-07T00:37:53.063Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39253 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12175 http://www.us-cert.gov/cas/techalerts/TA10-103A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0024`	vulnerable	2026-06-08 04:51:52.362922	Details available The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability." Published: 2010-04-14T15:44:00.000Z Updated: 2024-08-07T00:37:52.990Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7067 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024 http://www.us-cert.gov/cas/techalerts/TA10-103A.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.