VulnerabilityModified
CVE-2007-4223
Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors.
HIGH 10.0EPSS 7.45%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.45%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 7.45% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/sysinternals debugview
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=621
- http://secunia.com/advisories/27552Vendor Advisory
- http://www.securityfocus.com/bid/26359
- http://www.securitytracker.com/id?1018903
- http://www.vupen.com/english/advisories/2007/3756
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38292
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=621
- http://secunia.com/advisories/27552Vendor Advisory
- http://www.securityfocus.com/bid/26359
- http://www.securitytracker.com/id?1018903
- http://www.vupen.com/english/advisories/2007/3756
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38292
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.