Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*

part: o version: 2008 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Nt (a4e9cdbf-c1d8-5db6-a87c-50a74f2feec5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3843 not_vulnerable 2026-06-08 04:50:36.854480 Details available
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3842 not_vulnerable 2026-06-08 04:50:36.850110 Details available
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3365 not_vulnerable 2026-06-08 04:50:34.382810 Details available
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language_full parameter.
Published: 2008-07-30T17:00:00.000Z
Updated: 2024-08-07T09:37:26.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3008 not_vulnerable 2026-06-08 04:50:32.814409 Details available
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."
Published: 2008-09-10T15:00:00.000Z
Updated: 2024-08-07T09:21:34.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2253 not_vulnerable 2026-06-08 04:50:23.337657 Details available
Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."
Published: 2008-09-10T15:00:00.000Z
Updated: 2024-08-07T08:58:01.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2246 vulnerable 2026-06-08 04:50:23.316766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1457 vulnerable 2026-06-08 04:50:20.580348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1456 vulnerable 2026-06-08 04:50:20.578879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1435 vulnerable 2026-06-08 04:50:20.509008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.