Microsoft Windows XP SP3 English
Approved changes feed: RSS · Atom
cpe:2.3:o:microsoft:windows_xp:sp3:unknown:english:*:*:*:*:*
part: o version: sp3 update: unknown
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Windows Xp (ee6c3d4f-8190-55ff-a339-9886fe1fe140) |
| Edition | english |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3417 |
vulnerable | 2026-06-08 04:59:25.474914 |
Details available
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-06T23:37:47.532Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3416 |
vulnerable | 2026-06-08 04:59:25.474341 |
Details available
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-06T23:37:47.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3415 |
vulnerable | 2026-06-08 04:59:25.473632 |
Details available
Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-06T23:29:56.900Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3414 |
vulnerable | 2026-06-08 04:59:25.472915 |
Details available
The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability."
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-06T23:29:56.897Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1735 |
vulnerable | 2026-06-08 04:54:10.147993 |
Details available
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
Published: 2010-05-05T18:00:00.000Z
Updated: 2024-08-07T01:35:53.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1734 |
vulnerable | 2026-06-08 04:54:10.146239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4323 |
vulnerable | 2026-06-08 04:50:38.636073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.