PT-2007-1694 · Microsoft · Windows Shell+3

Published 2007-02-13 · Updated 2018-10-12 · CVE-2007-0211

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 and Professional Microsoft Windows Server 2003 SP1

Description A privilege elevation issue exists in the Windows Shell, related to the detection and registration of new hardware. This could allow an authenticated user to gain complete control of the system. The issue is due to an unvalidated parameter to a function.

Recommendations For Microsoft Windows XP SP2 and Professional, consider restricting access to the hardware detection functionality until a fix is available. For Microsoft Windows Server 2003 SP1, avoid using the hardware detection feature in the Windows Shell to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0211

Affected Products

Windows

Windows Server 2003

Windows Shell

Windows Xp

References · 13

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0211 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-0211 · Security Note
• http://securityfocus.com/bid/22481 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-006 · Note
• http://osvdb.org/31890 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224 · Note
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Note
• http://vupen.com/english/advisories/2007/0575 · Note
• http://securitytracker.com/id?1017633 · Note
• http://frsirt.com/english/advisories/2007/0575 · Note
• http://kb.cert.org/vuls/id/240796 · Note
• http://secunia.com/advisories/24126 · Note