Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 10/04/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows vista

CWE-399 http://research.eeye.com/html/advisories/published/AD20070410b.html http://www.securityfocus.com/bid/23338 http://www.securitytracker.com/id?1017897 http://www.osvdb.org/34008 http://www.us-cert.gov/cas/techalerts/TA07-100A.html http://www.kb.cert.org/vuls/id/219848 http://secunia.com/advisories/24823 http://securityreason.com/securityalert/2531 http://www.vupen.com/english/advisories/2007/1325 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 http://www.securityfocus.com/archive/1/466331/100/200/threaded http://www.securityfocus.com/archive/1/465233/100/0/threaded https://nvd.nist.gov https://www.kb.cert.org/vuls/id/219848

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1209

Vulnerability Summary

References

Vulmon Search

About

Products

Connect