CVE

Id
24566  
CVE No.
CVE-2007-1209  
Status
Candidate  
Description
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242170 24566 CVE-2007-1209 BUGTRAQ:20070410 EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation  View
242171 24566 CVE-2007-1209 URL:http://www.securityfocus.com/archive/1/archive/1/465233/100/0/threaded  View
242172 24566 CVE-2007-1209 MISC:http://research.eeye.com/html/advisories/published/AD20070410b.html  View
242173 24566 CVE-2007-1209 HP:HPSBST02208  View
242174 24566 CVE-2007-1209 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
242175 24566 CVE-2007-1209 HP:SSRT071365  View
242176 24566 CVE-2007-1209 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
242177 24566 CVE-2007-1209 MS:MS07-021  View
242178 24566 CVE-2007-1209 URL:http://www.microsoft.com/technet/security/bulletin/ms07-021.mspx  View
242179 24566 CVE-2007-1209 CERT:TA07-100A  View
242180 24566 CVE-2007-1209 URL:http://www.us-cert.gov/cas/techalerts/TA07-100A.html  View
242181 24566 CVE-2007-1209 CERT-VN:VU#219848  View
242182 24566 CVE-2007-1209 URL:http://www.kb.cert.org/vuls/id/219848  View
242183 24566 CVE-2007-1209 BID:23338  View
242184 24566 CVE-2007-1209 URL:http://www.securityfocus.com/bid/23338  View
242185 24566 CVE-2007-1209 VUPEN:ADV-2007-1325  View
242186 24566 CVE-2007-1209 URL:http://www.vupen.com/english/advisories/2007/1325  View
242187 24566 CVE-2007-1209 OSVDB:34008  View
242188 24566 CVE-2007-1209 URL:http://www.osvdb.org/34008  View
242189 24566 CVE-2007-1209 OVAL:oval:org.mitre.oval:def:1524  View
242190 24566 CVE-2007-1209 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1524  View
242191 24566 CVE-2007-1209 SECTRACK:1017897  View
242192 24566 CVE-2007-1209 URL:http://www.securitytracker.com/id?1017897  View
242193 24566 CVE-2007-1209 SECUNIA:24823  View
242194 24566 CVE-2007-1209 URL:http://secunia.com/advisories/24823  View
242195 24566 CVE-2007-1209 SREASON:2531  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51581 JVNDB-2007-000243 Microsoft Windows GDI の不正な WMF ファイルのレンダリングによるサービス運用妨害 (DoS) 脆弱性 Microsoft Windows には、Graphics Device Interface (GDI) の特定の関数において、Windows メタファイル (WMF) 画像形式のファルをレンダリングする際に、無効なオフセット値を読み込んでしまいシステムがクラッシュする脆弱性が存在します。 CVE-2007-1211 24566 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000243.html  View