GCVE - cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*

part: o version: vista update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Nt (`a4e9cdbf-c1d8-5db6-a87c-50a74f2feec5`)
Edition	gold
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3014`	vulnerable	2026-06-08 04:50:32.857295	Details available Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T09:21:34.956Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 http://www.securityfocus.com/bid/31021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6004	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3012`	vulnerable	2026-06-08 04:50:32.846773	Details available gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T09:21:34.935Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6040 http://www.vupen.com/english/advisories/2008/2696	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1457`	vulnerable	2026-06-08 04:50:20.580368	Details available The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request. Published: 2008-08-13T10:00:00.000Z Updated: 2024-08-07T08:24:41.861Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2353 http://www.us-cert.gov/cas/techalerts/TA08-225A.html http://www.securitytracker.com/id?1020677 http://marc.info/?l=bugtraq&m=121915960406986&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1456`	vulnerable	2026-06-08 04:50:20.579754	Details available Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers. Published: 2008-08-13T10:00:00.000Z Updated: 2024-08-07T08:24:41.824Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2353 http://www.us-cert.gov/cas/techalerts/TA08-225A.html http://www.securitytracker.com/id?1020677 http://marc.info/?l=bugtraq&m=121915960406986&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5348`	vulnerable	2026-06-08 04:50:04.931801	Details available Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T15:24:42.624Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 http://www.vupen.com/english/advisories/2008/2696 http://www.securitytracker.com/id?1020834	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.