CVE-2008-3465
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-3465
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows GDI堆溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Windows是微软发布的非常流行的操作系统。 Windows的GDI处理WMF文件中文件大小参数的方式中存在一个堆溢出漏洞。如果第三方应用程序使用特定的Microsoft API复制特制的WMF图像文件，就可以触发这个溢出，但成功利用这个漏洞最可能的结果是拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-3465
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-3465
Please Login to view more intelligence information
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6062vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2008-3465
Same Patch Batch · n/a · 2008-12-10 · 41 CVEs total
| CVE-2008-5419 | EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞 | |
| CVE-2008-4265 | Microsoft Excel畸形对象解析远程代码执行漏洞 | |
| CVE-2008-4266 | Microsoft Excel数组内存破坏漏洞 | |
| CVE-2008-4268 | Microsoft Windows保存搜索文件处理内存破坏漏洞 | |
| CVE-2008-4269 | Microsoft Windows search-ms协议解析远程代码执行漏洞 | |
| CVE-2008-4837 | Microsoft Word畸形对象解析多个缓冲区溢出和内存破坏漏洞 | |
| CVE-2008-4841 | Microsoft写字板文件转换器远程代码执行漏洞 | |
| CVE-2008-5416 | Microsoft SQL Server sp_replwritetovarbin远程堆溢出漏洞 | |
| CVE-2008-5417 | HP DECnet-Plus OpenVMS 'OSIT$NAMES'权限许可和访问控制漏洞 | |
| CVE-2008-5418 | PUNBB PunPortal login.php目录遍历漏洞 | |
| CVE-2008-4264 | Microsoft Excel畸形公式解析远程代码执行漏洞 | |
| CVE-2008-5420 | EMC ControlCenter SAN Manager SST_SENDFILE远程文件检索漏洞 | |
| CVE-2008-4311 | D-Bus 规则绕过安全限制漏洞 | |
| CVE-2008-5304 | TWiki URLPARAM变量跨站脚本漏洞 | |
| CVE-2008-5305 | TWiki SEARCH变量SHELL命令注入漏洞 | |
| CVE-2008-5410 | Sun Solaris OpenSSL 'PKCS#11' Engine 远程拒绝服务漏洞 | |
| CVE-2008-5411 | IBM WebSphere应用程序服务器网络敏感信息泄露漏洞 | |
| CVE-2008-5412 | IBM WebSphere Windows上的JSPs未明漏洞 | |
| CVE-2008-5413 | IBM WebSphere PerfServlet信息泄露漏洞 | |
| CVE-2008-5414 | IBM WebSphere Feature Pack未明漏洞 |
Showing top 20 of 41 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2008-3465
No comments yet