VYPR
← All advisories
High severity8.4NVD Advisory· Published Oct 15, 2008· Updated Jun 16, 2026

CVE-2008-4036

CVE-2008-4036

Description

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

20
  • Microsoft/Windows Server 20035 versions
    cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
    • (no CPE)range: SP1 and SP2
  • Microsoft/Windows Server 20085 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
    • (no CPE)range: Gold
  • Microsoft/Windows4 versions
    cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
  • Microsoft/Windows Xp5 versions
    cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*
    • (no CPE)range: SP2 and SP3
  • Microsoft/Windows Vistallm-fuzzy
    Range: Gold and SP1

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.