Microsoft Patch Tuesday, January 2008: the CVEs

Microsoft Patch Tuesday January 2008: the CVEs Microsoft published on 8 January 2008, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2007, Nov 2007, Oct 2007, Sep 2007, Aug 2007, Jul 2007, Jun 2007, May 2007, Apr 2007, Mar 2007, Feb 2007, Jan 2007. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. –CVE-2007-5352EPSS 2.6%2008-01-08

   Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.

2. –CVE-2007-0069EPSS 49%2008-01-08

   Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 pac…

3. –CVE-2007-0066EPSS 32%2008-01-08

   The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an …