Vulnerability in Microsoft Windows Xp

CVE-2008-0322

The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.

EPSS: 0.016 (73.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
  • cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_IDEFENSE, Patch, Broken Link, third-party-advisory)
  • cve@mitre.org (Patch, x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)

Frequently asked questions

What is CVE-2008-0322?
CVE-2008-0322 is a high-severity vulnerability in Microsoft Windows Xp, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2008-05-13.
How severe is CVE-2008-0322?
High severity. CVSS v3 base score is 7.8 out of 10.