PT-2007-1694 · Microsoft · Windows Shell+3

Publicado 2007-02-13 · Atualizado 2018-10-12 · CVE-2007-0211

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 and Professional Microsoft Windows Server 2003 SP1

Description A privilege elevation issue exists in the Windows Shell, related to the detection and registration of new hardware. This could allow an authenticated user to gain complete control of the system. The issue is due to an unvalidated parameter to a function.

Recommendations For Microsoft Windows XP SP2 and Professional, consider restricting access to the hardware detection functionality until a fix is available. For Microsoft Windows Server 2003 SP1, avoid using the hardware detection feature in the Windows Shell to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0211

Produtos afetados

Windows

Windows Server 2003

Windows Shell

Windows Xp

Referências · 13

• http://securityfocus.com/bid/22481 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-006 · Nota
• http://osvdb.org/31890 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224 · Nota
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Nota
• http://vupen.com/english/advisories/2007/0575 · Nota
• http://securitytracker.com/id?1017633 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006 · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/0575 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0211 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2007-0211 · Nota de Segurança
• http://kb.cert.org/vuls/id/240796 · Nota
• http://secunia.com/advisories/24126 · Nota