← Back

CVE-2008-0087

nvd nist
Published: Apr 8, 2008Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.

Affected (7)

Microsoft
4 products
Windows 2000
Windows Server 2003
Windows Vista
Windows Xp
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Windows 2000
All versions
Microsoft
Windows Server 2003
All versions
Windows Server 2003
All versions
Windows Vista
All versions
Microsoft
Windows Xp
All versions
Windows Xp
All versions
Windows Xp
All versions

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (20)

Source: secure@microsoft.com
Mailing ListThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secure@microsoft.com
Broken LinkPatchThird Party AdvisoryVDB Entry
Source: secure@microsoft.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secure@microsoft.com
Broken Link
Source: secure@microsoft.com
Broken LinkThird Party AdvisoryUS Government Resource
Source: secure@microsoft.com
Broken Link
Source: secure@microsoft.com
PatchVendor Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory

Timeline

No history available yet.