7.2

CVE-2007-1209

EPSS 2.08%
Published 10.04.2007 21:19:00
Last modified 09.04.2025 00:30:58
Source secure@microsoft.com
Teams watchlist Login
Open Login

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.

Affected products Warnungen 0 Metrics 2 CWE 0 References 16

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Windows Vista

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.08%	0.823

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/archive/1/466331/100/200/threaded

http://www.vupen.com/english/advisories/2007/1325

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021

http://www.us-cert.gov/cas/techalerts/TA07-100A.html

US Government Resource

http://research.eeye.com/html/advisories/published/AD20070410b.html

http://secunia.com/advisories/24823

http://securityreason.com/securityalert/2531

http://www.kb.cert.org/vuls/id/219848

US Government Resource

http://www.osvdb.org/34008

http://www.securityfocus.com/archive/1/465233/100/0/threaded

http://www.securityfocus.com/bid/23338

http://www.securitytracker.com/id?1017897

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524

https://nvd.nist.gov/vuln/detail/CVE-2007-1209

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1209

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1209

EUVD