CVE

Id
24563  
CVE No.
CVE-2007-1206  
Status
Candidate  
Description
The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain privileges by modifying the "zero page" during a race condition before the view is unmapped.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242146 24563 CVE-2007-1206 BUGTRAQ:20070410 EEYE: Windows VDM Zero Page Race Condition Privilege Escalation  View
242147 24563 CVE-2007-1206 URL:http://www.securityfocus.com/archive/1/archive/1/465232/100/0/threaded  View
242148 24563 CVE-2007-1206 MISC:http://research.eeye.com/html/advisories/published/AD20070410a.html  View
242149 24563 CVE-2007-1206 HP:HPSBST02208  View
242150 24563 CVE-2007-1206 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
242151 24563 CVE-2007-1206 HP:SSRT071365  View
242152 24563 CVE-2007-1206 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
242153 24563 CVE-2007-1206 MS:MS07-022  View
242154 24563 CVE-2007-1206 URL:http://www.microsoft.com/technet/security/bulletin/ms07-022.mspx  View
242155 24563 CVE-2007-1206 CERT:TA07-100A  View
242156 24563 CVE-2007-1206 URL:http://www.us-cert.gov/cas/techalerts/TA07-100A.html  View
242157 24563 CVE-2007-1206 CERT-VN:VU#337953  View
242158 24563 CVE-2007-1206 URL:http://www.kb.cert.org/vuls/id/337953  View
242159 24563 CVE-2007-1206 BID:23367  View
242160 24563 CVE-2007-1206 URL:http://www.securityfocus.com/bid/23367  View
242161 24563 CVE-2007-1206 VUPEN:ADV-2007-1326  View
242162 24563 CVE-2007-1206 URL:http://www.vupen.com/english/advisories/2007/1326  View
242163 24563 CVE-2007-1206 OSVDB:34011  View
242164 24563 CVE-2007-1206 URL:http://www.osvdb.org/34011  View
242165 24563 CVE-2007-1206 OVAL:oval:org.mitre.oval:def:1639  View
242166 24563 CVE-2007-1206 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1639  View
242167 24563 CVE-2007-1206 SECTRACK:1017898  View
242168 24563 CVE-2007-1206 URL:http://securitytracker.com/id?1017898  View
242169 24563 CVE-2007-1206 SECUNIA:24834  View

Related JVN