CVE-2008-6819

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-06-01 · updated 2026-06-16
Weakness: CWE-362

Description

win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.

Affected products

Microsoft Windows 2003 Server: all versions
Microsoft Windows Vista: all versions

References

http://bugtraq.ru/cgi-bin/forum.mcgi?type=sb&b=2&m=152274
http://www.securityfocus.com/bid/35121
http://www.securityfocus.com/data/vulnerabilities/exploits/35121.c
http://bugtraq.ru/cgi-bin/forum.mcgi?type=sb&b=2&m=152274
http://www.securityfocus.com/bid/35121
http://www.securityfocus.com/data/vulnerabilities/exploits/35121.c

Get alerted when CVE-2008-6819 or the next vulnerability affects your stack