GCVE - cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*

part: o version: - update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Vista (`bda7fc97-9e6d-5e57-b33c-ba0ce76634f1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	x64
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-0073`	vulnerable	2026-06-08 05:08:25.372801	Details available The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062. Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:19.045Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0073 http://www.securityfocus.com/bid/96637	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-0060`	vulnerable	2026-06-08 05:08:25.359906	Details available The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062. Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:18.224Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96713 https://www.exploit-db.com/exploits/41656/ http://www.securitytracker.com/id/1038002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0060	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3876`	vulnerable	2026-06-08 05:04:33.069412	Details available DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify server X.509 certificates, which allows man-in-the-middle attackers to spoof servers and read encrypted domain credentials via a crafted certificate. Published: 2013-11-16T02:00:00.000Z Updated: 2024-09-16T20:36:42.576Z Open on db.gcve.eu Reference links http://technet.microsoft.com/security/advisory/2862152	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3128`	not_vulnerable	2026-06-08 05:04:30.185702	Details available The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability." Published: 2013-10-09T14:44:00.000Z Updated: 2024-08-06T16:00:09.802Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18847 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-082 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 http://www.us-cert.gov/ncas/alerts/TA13-288A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3128`	vulnerable	2026-06-08 05:04:30.184200	Details available The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability." Published: 2013-10-09T14:44:00.000Z Updated: 2024-08-06T16:00:09.802Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18847 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-082 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 http://www.us-cert.gov/ncas/alerts/TA13-288A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4969`	not_vulnerable	2026-06-08 05:02:53.480869	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1229`	vulnerable	2026-06-08 04:57:57.310813	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.