GCVE - cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:-:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:-:*:x64:*

part: o version: - update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Vista (`bda7fc97-9e6d-5e57-b33c-ba0ce76634f1`)
Edition	*
Language	*
Software edition	-
Target software	*
Target hardware	x64
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-3163`	not_vulnerable	2026-06-08 05:04:30.269031	Details available Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3151. Published: 2013-07-10T01:00:00.000Z Updated: 2025-10-22T00:05:41.417Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17363 http://www.us-cert.gov/ncas/alerts/TA13-190A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0249`	not_vulnerable	2026-06-08 04:52:01.248258	Details available Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability." Published: 2010-01-15T17:00:00.000Z Updated: 2026-05-21T03:55:30.221Z Open on db.gcve.eu Reference links http://www.microsoft.com/technet/security/advisory/979352.mspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835 http://osvdb.org/61697 http://www.securityfocus.com/bid/37815 http://www.kb.cert.org/vuls/id/492515	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3023`	not_vulnerable	2026-06-08 04:51:31.873815	Details available Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability." Published: 2009-08-31T20:00:00.000Z Updated: 2024-08-07T06:14:55.348Z Open on db.gcve.eu Reference links http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6080 http://www.securityfocus.com/bid/36189 http://www.exploit-db.com/exploits/9541 http://www.us-cert.gov/cas/techalerts/TA09-286A.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.