GCVE - cpe:2.3:o:microsoft:windows_xp:-:sp3:home:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_xp:-:sp3:home:*:*:*:*:*

part: o version: - update: sp3

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Xp (`ee6c3d4f-8190-55ff-a339-9886fe1fe140`)
Edition	home
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1735`	vulnerable	2026-06-08 04:54:10.147907	Details available The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.707Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39630 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510884/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1734`	vulnerable	2026-06-08 04:54:10.143393	Details available The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.569Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39631 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510886/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0016`	vulnerable	2026-06-08 04:51:52.336741	Details available The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability." Published: 2010-02-10T18:00:00.000Z Updated: 2024-08-07T00:37:52.482Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8278 http://www.us-cert.gov/cas/techalerts/TA10-040A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1808`	vulnerable	2026-06-08 04:51:24.975828	Details available Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call. Published: 2009-05-28T20:14:00.000Z Updated: 2024-08-07T05:27:54.418Z Open on db.gcve.eu Reference links http://www.ragestorm.net/blogs/?p=78 https://exchange.xforce.ibmcloud.com/vulnerabilities/50903 http://www.securityfocus.com/bid/35120 http://www.securitytracker.com/id?1022330 http://secunia.com/advisories/35323	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.