CVE-2007-5352

Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1/SP2 - Local Privilege Escalation via LSASS LPC Request

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.

References (10)

Core 10
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-008A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39233
Patch third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28341
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0070
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1019165
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/410025
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27099
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/486317/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5408

Scores

EPSS 0.0257
EPSS Percentile 83.7%

Details

CWE
CWE-264
Status published
Products (4)
microsoft/windows_2000
microsoft/windows_2003_server sp1
microsoft/windows_2003_server sp2
microsoft/windows_xp
Published Jan 08, 2008
Tracked Since Feb 18, 2026