CVE-2007-0211

Microsoft Windows XP SP2/Professional & Server 2003 SP1 - Privilege...

Title source: llm

Description

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."

References (9)

Core 9

Core References

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/0575

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/240796

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24126

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017633

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA07-044A.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/22481

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/31890

Scores

EPSS 0.0257

EPSS Percentile 83.7%

Details

Status published

Products (2)

microsoft/windows_2003_server sp1

microsoft/windows_xp (2 CPE variants)

Published Feb 13, 2007

Tracked Since Feb 18, 2026