Vulnerability in Microsoft Windows 2003 Server
CVE-2007-0211
The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2003_server — versions sp1
- Microsoft Windows_xp
- N/a — versions n/a
References
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)