VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 15, 2008· Updated Jun 16, 2026

CVE-2008-2250

CVE-2008-2250

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Window Creation Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Microsoft/Windows 2000
    cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
  • Microsoft/Windows Server 20034 versions
    cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
  • Microsoft/Windows Server 20084 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
  • Microsoft/Windows5 versions
    cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows Xp4 versions
    cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*
  • Microsoft/Windows Kernelllm-fuzzy

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.