CVE-2007-2219

Microsoft Windows 2000, XP SP2, and Server 2003 SP1/SP2 - Remote Code Execution via Win32 API

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35341
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/471947/100/0/threaded
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/457281
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-163A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24370
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2155
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1643
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018230
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25640

Scores

EPSS 0.3181
EPSS Percentile 98.1%

Details

Status published
Products (5)
microsoft/windows_2000
microsoft/windows_2003_server (2 CPE variants)
microsoft/windows_2003_server sp1 (2 CPE variants)
microsoft/windows_2003_server sp2 (2 CPE variants)
microsoft/windows_xp (3 CPE variants)
Published Jun 12, 2007
Tracked Since Feb 18, 2026