### CVE-2008-1084

#### 描述

内核中未指定的漏洞允许本地用户通过与错误输入验证有关的未知向量执行任意代码。

#### 影响版本

| Product              | CPU Architecture | Version | Update | Tested             |
| -------------------- | ---------------- | ------- | ------ | ------------------ |
| Windows 2000         |                  |         | SP4    |                    |
| Windows  Server 2003 |                  |         | SP2    | &#10004; |
| Windows  Server 2003 |                  |         | SP1    |                    |
| Windows  Server 2003 |                  |         |        |                    |
| Windows Server 2008  |                  |         |        |                    |
| Windows Vista        |                  |         |        |                    |
| Windows Vista        |                  |         | SP1    |                    |
| Windows Xp           |                  |         | SP2    |                    |
| Windows Xp           |                  |         |        |                    |

#### 利用方式

测试系统Windows Server 2003 SP2 x86

![27](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2008-1084_win2003_x86.gif)

#### 分析文章
- https://github.com/lyshark/Windows-exploits/blob/master/Windows%20%E5%86%85%E6%A0%B8%E6%BC%8F%E6%B4%9E%20ms08025%20%E5%88%86%E6%9E%90.7z
- https://bbs.pediy.com/thread-63099.htm