7.2

CVE-2007-1209

EPSS 2.08%
Veröffentlicht 10.04.2007 21:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 16

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows Vista

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.08%	0.823

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/archive/1/466331/100/200/threaded

http://www.vupen.com/english/advisories/2007/1325

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021

http://www.us-cert.gov/cas/techalerts/TA07-100A.html

US Government Resource

http://research.eeye.com/html/advisories/published/AD20070410b.html

http://secunia.com/advisories/24823

http://securityreason.com/securityalert/2531

http://www.kb.cert.org/vuls/id/219848

US Government Resource

http://www.osvdb.org/34008

http://www.securityfocus.com/archive/1/465233/100/0/threaded

http://www.securityfocus.com/bid/23338

http://www.securitytracker.com/id?1017897

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524

https://nvd.nist.gov/vuln/detail/CVE-2007-1209

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1209

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1209

EUVD