CVE-2007-0211
The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.65%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.65% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2003 server · microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/24126
- http://www.kb.cert.org/vuls/id/240796US Government Resource
- http://www.osvdb.org/31890
- http://www.securityfocus.com/bid/22481
- http://www.securitytracker.com/id?1017633
- http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/0575
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224
- http://secunia.com/advisories/24126
- http://www.kb.cert.org/vuls/id/240796US Government Resource
- http://www.osvdb.org/31890
- http://www.securityfocus.com/bid/22481
- http://www.securitytracker.com/id?1017633
- http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/0575
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.