CVE-2007-1209

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when…

published April 10, 2007

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02686 · 85.7th percentile
Published
2007-04-10T21:00Z
EPSS history
Timeline
  • 10 APR 21:00Z
    Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when…
    cvelistv5