PT-2007-2926 · Microsoft · Ndistapi.Sys+2

Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1537

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 Microsoft Windows 2003 SP1

Description The issue concerns weak permissions in the DeviceNdisTapi (NDISTAPI.sys) component, allowing local users to write to the device. This can cause a denial of service, demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.

Recommendations For Microsoft Windows XP SP2, update the system to address the weak permissions issue in the DeviceNdisTapi component. For Microsoft Windows 2003 SP1, update the system to address the weak permissions issue in the DeviceNdisTapi component.

Correção

Identificadores relacionados

CVE-2007-1537

Produtos afetados

Ndistapi.Sys

Windows 2003

Windows Xp

Referências · 9

• http://vupen.com/english/advisories/2007/1031 · Nota
• http://securityfocus.com/bid/23025 · Nota
• http://secunia.com/advisories/24598 · Nota
• http://osvdb.org/33628 · Nota
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=47 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33086 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1537 · Nota de Segurança
• http://securityfocus.com/archive/1/463208/100/0/threaded · Nota
• http://securityreason.com/securityalert/2471 · Nota