PT-2007-2632 · Microsoft · Windows Vista+1

Derek Soeder · Publicado 2007-04-10 · Atualizado 2018-10-16 · CVE-2007-1209

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description A use-after-free issue in the Client/Server Run-time Subsystem (CSRSS) does not properly handle connection resources when starting and stopping processes. This allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure. The vulnerability exists in the way that the Windows 32 Client/Server Run-time Subsystem (CSRSS) handles its connections during the startup and stopping of processes.

Recommendations For Microsoft Windows Vista, apply the recommended patch or update to fix the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-1209

Produtos afetados

Windows Vista

Windows

Referências · 18

• http://vupen.com/english/advisories/2007/1325 · Aviso do Fabricante
• http://securityfocus.com/archive/1/archive/1/466331/100/200/threaded · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524 · Nota
• http://kb.cert.org/vuls/id/219848 · Nota
• http://secunia.com/advisories/24823 · Nota
• http://securityfocus.com/archive/1/465233/100/0/threaded · Nota
• http://securityfocus.com/archive/1/466331/100/200/threaded · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-021 · Nota
• http://securityreason.com/securityalert/2531 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1209 · Nota de Segurança
• http://securityfocus.com/bid/23338 · Nota
• http://research.eeye.com/html/advisories/published/AD20070410b.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1209 · Nota de Segurança
• http://securitytracker.com/id?1017897 · Nota
• http://securityfocus.com/archive/1/archive/1/465233/100/0/threaded · Nota