VulnerabilityModified
CVE-2007-1973
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.
MEDIUM 6.9EPSS 1.49%
Does this matter?
Lower severity and a low EPSS score (1.49%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 1.49% probability · 73th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows nt
- Source
- cve@mitre.org
References
- http://osvdb.org/37635
- http://research.eeye.com/html/advisories/published/AD20070410a.htmlVendor Advisory
- http://securityreason.com/securityalert/2563
- http://www.securityfocus.com/archive/1/465232/100/0/threaded
- http://osvdb.org/37635
- http://research.eeye.com/html/advisories/published/AD20070410a.htmlVendor Advisory
- http://securityreason.com/securityalert/2563
- http://www.securityfocus.com/archive/1/465232/100/0/threaded
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.