VulnerabilityModified

CVE-2007-2219

Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.

HIGH 9.3EPSS 31.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 31.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 31.81% probability · 98th percentile
CISA KEV: Not listed
Affected: microsoft/windows 2000 · microsoft/windows 2003 server · microsoft/windows xp
Source: secure@microsoft.com

References

http://osvdb.org/35341
http://secunia.com/advisories/25640
http://www.kb.cert.org/vuls/id/457281US Government Resource
http://www.securityfocus.com/archive/1/471947/100/0/threaded
http://www.securityfocus.com/bid/24370
http://www.securitytracker.com/id?1018230
http://www.us-cert.gov/cas/techalerts/TA07-163A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2007/2155
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-035
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1643
http://osvdb.org/35341
http://secunia.com/advisories/25640
http://www.kb.cert.org/vuls/id/457281US Government Resource
http://www.securityfocus.com/archive/1/471947/100/0/threaded
http://www.securityfocus.com/bid/24370
http://www.securitytracker.com/id?1018230
http://www.us-cert.gov/cas/techalerts/TA07-163A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2007/2155
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-035
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1643

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.