CVE-2007-1973

Severity

69%

Complexity

34%

Confidentiality

165%

Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.

Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.

CVSS 2.0 Base Score 6.9. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 17 years ago

2007-04-11 23:19:00

Last updated 6 years ago

2018-10-16 16:41:00

Affected Software

Microsoft Windows NT 4.0

4.0

References

37635

http://research.eeye.com/html/advisories/published/AD20070410a.html

Vendor Advisory

2563

20070410 EEYE: Windows VDM Zero Page Race Condition Privilege Escalation

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.