CVE-2007-2374

Severity

93%

Complexity

86%

Confidentiality

165%

Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.

Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Microsoft

First reported 17 years ago

2007-04-30 23:19:00

Last updated 5 years ago

2019-04-30 14:27:00

Affected Software

Microsoft Windows 2000

Microsoft windows 2000_sp1

Microsoft windows 2000_sp2

Microsoft windows 2000_sp3

Microsoft Windows 2000 Service Pack 4

Microsoft Windows 2003 Service Pack 1 Itanium

Microsoft windows xp_gold

Microsoft windows xp_sp1 embedded

Microsoft Windows XP Service Pack 1 Home Edition

Microsoft windows xp_sp1 media_center

Microsoft Windows XP Professional SP1

Microsoft windows xp_sp1 tablet_pc

Microsoft Windows XP Service Pack 2 Home Edition

Microsoft windows xp_sp2 media_center

Microsoft Windows XP Professional SP2

Microsoft windows xp_sp2 tablet_pc

References

35637

http://research.eeye.com/html/advisories/upcoming/20070327.html

23332

win-unspecified-code-execution(34444)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.