National Cyber Awareness System

Vulnerability Summary for CVE-2007-1206

Overview

The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain privileges by modifying the "zero page" during a race condition before the view is unmapped.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-100A

Name: TA07-100A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-100A.html

US-CERT Vulnerability Note: VU#337953

Name: VU#337953

Hyperlink:http://www.kb.cert.org/vuls/id/337953

External Source: MS

Name: MS07-022

Type: Advisory; Patch Information

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms07-022.mspx

External Source: VUPEN

Name: ADV-2007-1326

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/1326

External Source: BID

Name: 23367

Hyperlink:http://www.securityfocus.com/bid/23367

External Source: HP

Name: SSRT071365

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded

External Source: HP

Name: SSRT071365

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded

External Source: BUGTRAQ

Name: 20070410 EEYE: Windows VDM Zero Page Race Condition Privilege Escalation

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/465232/100/0/threaded

External Source: OSVDB

Name: 34011

Hyperlink:http://www.osvdb.org/34011

External Source: SECTRACK

Name: 1017898

Hyperlink:http://securitytracker.com/id?1017898

External Source: SECUNIA

Name: 24834

Type: Advisory

Hyperlink:http://secunia.com/advisories/24834

External Source: MISC

Name: http://research.eeye.com/html/advisories/published/AD20070410a.html

Hyperlink:http://research.eeye.com/html/advisories/published/AD20070410a.html

US Government Resource: oval:org.mitre.oval:def:1639

Name: oval:org.mitre.oval:def:1639

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1639

References to Check Content

Identifier:oval:org.mitre.oval:def:1639

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1639