CVE Vulnerabilities

CVE-2007-1206

Published: Apr 10, 2007 | Modified: Oct 16, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain privileges by modifying the zero page during a race condition before the view is unmapped.

Affected Software

Name Vendor Start Version End Version
Windows_2000 Microsoft * *
Windows_2003_server Microsoft gold (including) gold (including)
Windows_2003_server Microsoft sp1 (including) sp1 (including)
Windows_2003_server Microsoft sp2 (including) sp2 (including)
Windows_xp Microsoft * *

References