GCVE - cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*

part: o version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Vista (`bda7fc97-9e6d-5e57-b33c-ba0ce76634f1`)
Edition	ultimate
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1216`	vulnerable	2026-06-08 04:51:13.861603	Details available Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors. Published: 2009-04-01T17:00:00.000Z Updated: 2024-08-07T05:04:49.253Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0849 http://securitytracker.com/id?1021937 http://support.microsoft.com/kb/953602 http://www.securityfocus.com/bid/34258 http://secunia.com/advisories/34428	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3893`	vulnerable	2026-06-08 04:50:37.076829	Details available Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Published: 2008-09-03T14:00:00.000Z Updated: 2025-04-03T13:36:25.239Z Open on db.gcve.eu Reference links http://secunia.com/advisories/31619 http://www.ivizsecurity.com/security-advisory-iviz-sr-0801.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0951`	vulnerable	2026-06-08 04:50:18.339575	Details available Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions. Published: 2008-03-24T22:00:00.000Z Updated: 2024-08-07T08:01:40.119Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/41349 http://www.securityfocus.com/bid/28360 http://www.kb.cert.org/vuls/id/889747 http://www.securitytracker.com/id?1020446 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-038	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5133`	vulnerable	2026-06-08 04:49:57.950433	Details available Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png. Published: 2007-09-27T19:00:00.000Z Updated: 2024-08-07T15:17:28.339Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/480594/100/0/threaded http://www.securityfocus.com/archive/1/480854/100/0/threaded http://www.securityfocus.com/archive/1/480706/100/0/threaded http://www.securityfocus.com/archive/1/480827/100/0/threaded http://www.securityfocus.com/bid/25816	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3671`	vulnerable	2026-06-08 04:49:54.537089	Details available Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as shown in the "0day IPO" presentation at SyScan'07. Published: 2007-07-10T19:00:00.000Z Updated: 2024-08-07T14:28:51.361Z Open on db.gcve.eu Reference links http://www.immunityinc.com/downloads/0day_IPO.pdf http://osvdb.org/45809 http://www.securityfocus.com/bid/24816 http://blogs.zdnet.com/security/?p=358	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.