PT-2007-2632 · Microsoft · Windows Vista+1

Derek Soeder · Published 2007-04-10 · Updated 2018-10-16 · CVE-2007-1209

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description A use-after-free issue in the Client/Server Run-time Subsystem (CSRSS) does not properly handle connection resources when starting and stopping processes. This allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure. The vulnerability exists in the way that the Windows 32 Client/Server Run-time Subsystem (CSRSS) handles its connections during the startup and stopping of processes.

Recommendations For Microsoft Windows Vista, apply the recommended patch or update to fix the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-1209

Affected Products

Windows Vista

Windows

References · 18

• http://vupen.com/english/advisories/2007/1325 · Vendor Advisory
• http://securityfocus.com/archive/1/466331/100/200/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1209 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-1209 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 · Vendor Advisory
• http://securityfocus.com/archive/1/archive/1/466331/100/200/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524 · Note
• http://kb.cert.org/vuls/id/219848 · Note
• http://secunia.com/advisories/24823 · Note
• http://securityfocus.com/archive/1/465233/100/0/threaded · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-021 · Note
• http://securityreason.com/securityalert/2531 · Note
• http://securityfocus.com/bid/23338 · Note
• http://research.eeye.com/html/advisories/published/AD20070410b.html · Note
• http://securitytracker.com/id?1017897 · Note