Unscored severity · published Apr 11, 2007
CVE-2007-1973
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WN
Windows NT · Microsoft
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1973
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1973
osvdb.org
http://osvdb.org/37635
Vendor Advisory
http://research.eeye.com/html/advisories/published/AD20070410a.html
securityreason.com
http://securityreason.com/securityalert/2563
www.securityfocus.com
http://www.securityfocus.com/archive/1/465232/100/0/threaded
More from Windows NT
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
7.8
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
9.8
CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…
9.8
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS…
9.1
CVE-1999-0511
IP forwarding is enabled on a machine which is not a router or firewall