Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*

part: o version: xp update: sp3

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Nt (a4e9cdbf-c1d8-5db6-a87c-50a74f2feec5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3843 not_vulnerable 2026-06-08 04:50:36.854546 Details available
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3842 not_vulnerable 2026-06-08 04:50:36.848231 Details available
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3635 not_vulnerable 2026-06-08 04:50:35.724651 Details available
Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Published: 2008-09-10T16:00:00.000Z
Updated: 2024-08-07T09:45:18.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3630 not_vulnerable 2026-06-08 04:50:35.696598 Details available
mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Published: 2008-09-10T16:00:00.000Z
Updated: 2024-08-07T09:45:18.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3629 not_vulnerable 2026-06-08 04:50:35.694813 Details available
Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read.
Published: 2008-09-10T16:00:00.000Z
Updated: 2024-08-07T09:45:18.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3624 not_vulnerable 2026-06-08 04:50:35.676640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3614 not_vulnerable 2026-06-08 04:50:35.637325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3014 vulnerable 2026-06-08 04:50:32.857320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3012 vulnerable 2026-06-08 04:50:32.846811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3008 vulnerable 2026-06-08 04:50:32.815538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2326 not_vulnerable 2026-06-08 04:50:23.508883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2253 not_vulnerable 2026-06-08 04:50:23.339557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1457 vulnerable 2026-06-08 04:50:20.580385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1456 vulnerable 2026-06-08 04:50:20.579797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1453 vulnerable 2026-06-08 04:50:20.571870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1444 not_vulnerable 2026-06-08 04:50:20.537315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0011 not_vulnerable 2026-06-08 04:50:09.925334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5348 vulnerable 2026-06-08 04:50:04.932355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.