GCVE - cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*

part: o version: - update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Xp (`ee6c3d4f-8190-55ff-a339-9886fe1fe140`)
Edition	home
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1735`	vulnerable	2026-06-08 04:54:10.147838	Details available The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.707Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39630 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510884/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1734`	vulnerable	2026-06-08 04:54:10.142002	Details available The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.569Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39631 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510886/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0016`	vulnerable	2026-06-08 04:51:52.336173	Details available The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability." Published: 2010-02-10T18:00:00.000Z Updated: 2024-08-07T00:37:52.482Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8278 http://www.us-cert.gov/cas/techalerts/TA10-040A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2531`	vulnerable	2026-06-08 04:51:29.068807	Details available Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530. Published: 2009-10-14T10:00:00.000Z Updated: 2024-08-07T05:52:14.958Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5766	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2530`	vulnerable	2026-06-08 04:51:29.067864	Details available Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2531. Published: 2009-10-14T10:00:00.000Z Updated: 2024-08-07T05:52:15.198Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6190	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2529`	vulnerable	2026-06-08 04:51:29.066847	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1547`	vulnerable	2026-06-08 04:51:23.933759	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.