VulnerabilityModified

CVE-2007-5350

Unspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in Microsoft Windows Vista allows local users to gain privileges via unspecified vectors involving "legacy reply paths."

HIGH 7.2EPSS 3.70%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 3.70% probability · 89th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: microsoft/windows vista
Source: secure@microsoft.com

References

http://secunia.com/advisories/28015
http://www.kb.cert.org/vuls/id/601073US Government Resource
http://www.securityfocus.com/archive/1/485268/100/0/threaded
http://www.securityfocus.com/bid/26757
http://www.securitytracker.com/id?1019075
http://www.us-cert.gov/cas/techalerts/TA07-345A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2007/4182
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-066
https://exchange.xforce.ibmcloud.com/vulnerabilities/38729
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3912
http://secunia.com/advisories/28015
http://www.kb.cert.org/vuls/id/601073US Government Resource
http://www.securityfocus.com/archive/1/485268/100/0/threaded
http://www.securityfocus.com/bid/26757
http://www.securitytracker.com/id?1019075
http://www.us-cert.gov/cas/techalerts/TA07-345A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2007/4182
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-066
https://exchange.xforce.ibmcloud.com/vulnerabilities/38729
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3912

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.