GCVE - cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*

part: o version: - update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Vista (`bda7fc97-9e6d-5e57-b33c-ba0ce76634f1`)
Edition	*
Language	*
Software edition	-
Target software	*
Target hardware	x64
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0249`	not_vulnerable	2026-06-08 04:52:01.247764	Details available Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability." Published: 2010-01-15T17:00:00.000Z Updated: 2026-05-21T03:55:30.221Z Open on db.gcve.eu Reference links http://www.microsoft.com/technet/security/advisory/979352.mspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835 http://osvdb.org/61697 http://www.securityfocus.com/bid/37815 http://www.kb.cert.org/vuls/id/492515	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3023`	not_vulnerable	2026-06-08 04:51:31.873006	Details available Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability." Published: 2009-08-31T20:00:00.000Z Updated: 2024-08-07T06:14:55.348Z Open on db.gcve.eu Reference links http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6080 http://www.securityfocus.com/bid/36189 http://www.exploit-db.com/exploits/9541 http://www.us-cert.gov/cas/techalerts/TA09-286A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4250`	vulnerable	2026-06-08 04:50:38.349888	Details available The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability." Published: 2008-10-23T21:00:00.000Z Updated: 2026-05-21T03:55:20.953Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=122703006921213&w=2 http://secunia.com/advisories/32326 http://www.kb.cert.org/vuls/id/827267 http://www.securitytracker.com/id?1021091 https://www.exploit-db.com/exploits/7132	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.