GCVE - cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*

part: o version: sp3 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Xp (`ee6c3d4f-8190-55ff-a339-9886fe1fe140`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3227`	vulnerable	2026-06-08 04:55:13.752198	Details available Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability." Published: 2010-10-26T21:00:00.000Z Updated: 2024-08-07T03:03:18.722Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1024557 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6696 http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100705-%281%29 http://www.exploit-db.com/exploits/13921/ https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1735`	vulnerable	2026-06-08 04:54:10.147976	Details available The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.707Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39630 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510884/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1734`	vulnerable	2026-06-08 04:54:10.145685	Details available The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.569Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39631 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510886/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0233`	vulnerable	2026-06-08 04:51:53.628447	Details available Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability." Published: 2010-02-10T18:00:00.000Z Updated: 2024-08-07T00:45:11.910Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392 http://www.us-cert.gov/cas/techalerts/TA10-040A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2527`	not_vulnerable	2026-06-08 04:51:29.055255	Details available Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka "WMP Heap Overflow Vulnerability." Published: 2009-10-14T10:00:00.000Z Updated: 2024-08-07T05:52:14.982Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6184 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1530`	not_vulnerable	2026-06-08 04:51:23.870555	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1529`	not_vulnerable	2026-06-08 04:51:23.869253	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0229`	vulnerable	2026-06-08 04:51:08.466245	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4029`	not_vulnerable	2026-06-08 04:50:37.536234	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.