NVD

Id
53413  
Name
CVE-2007-1209  
Description
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-10  
Modified Date
2011-03-10  
Seq
2007-1209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270367 53413 CVE-2007-1209 oval:org.mitre.oval:def:1524  View
270368 53413 CVE-2007-1209 http://research.eeye.com/html/advisories/published/AD20070410b.html  View
270369 53413 CVE-2007-1209 2531  View
270370 53413 CVE-2007-1209 VU#219848  View
270371 53413 CVE-2007-1209 MS07-021  View
270372 53413 CVE-2007-1209 20070410 EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation  View
270373 53413 CVE-2007-1209 SSRT071365  View
270374 53413 CVE-2007-1209 23338  View
270375 53413 CVE-2007-1209 1017897  View
270376 53413 CVE-2007-1209 TA07-100A  View
270377 53413 CVE-2007-1209 ADV-2007-1325  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51600 JVNDB-2007-000262 Microsoft Windows Vista の CSRSS における権限昇格の脆弱性 Microsoft Windows Vista には、Client Server Run Time Subsystem (CSRSS) プロセスの起動および停止中にその接続を処理する方法に不備があり、メモリリソースにおいて解放後使用 (Use-after-free) の状態が生じる脆弱性が存在します。 CVE-2007-1209 24564 CVE-2007-1209 53413 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000262.html 2007-04-10 2007-05-11 View