Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows…

Published 18 y ago 2008-10-15 · modified 4 mo ago 2026-06-16 · JSON

CVSS

8.4

v3.1 · CNA

CISA KEV

not known exploited

EPSS

1.5%

percentile 75%

Public exploits

none known

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability."

CISA SSVC assessment

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago 2024-01-11

Exploit prediction (EPSS)

1.53% probability of exploitation in the next 30 days, higher than 75% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CISA ADP	3.1	8.4	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CNA	3.1	8.4	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	7.2	`AV:L/AC:L/Au:N/C:C/I:C/A:C`

Classification

Weakness

CWE-190 Integer Overflow or Wraparound
CWE-189 Numeric Errors

References

secunia.com /advisories/32251 · third-party-advisory, x_refsource_SECUNIA, x_transferred
marc.info /?l=bugtraq&m=122479227205998&w=2 · vendor-advisory, x_refsource_HP, x_transferred
vupen.com /english/advisories/2008/2815 · vdb-entry, x_refsource_VUPEN, x_transferred
securitytracker.com /id?1021051 · vdb-entry, x_refsource_SECTRACK, x_transferred
docs.microsoft.com /en-us/security-updates/securitybulletins/2008/ms08-064 · vendor-advisory, x_refsource_MS, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/45571 · vdb-entry, x_refsource_XF, x_transferred
securityfocus.com /bid/31675 · vdb-entry, x_refsource_BID, x_transferred
us-cert.gov /cas/techalerts/TA08-288A.html · third-party-advisory, x_refsource_CERT, x_transferred
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5343 · vdb-entry, signature, x_refsource_OVAL, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/45572 · vdb-entry, x_refsource_XF, x_transferred

Sources

CVE List: CVE-2008-4036
NVD: CVE-2008-4036

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.