CVE-2007-1206: microsoft windows_2003_server
Vulnerability summary
CVE-2007-1206 is a high (CVSS 7.2) vulnerability in microsoft windows_2003_server. EPSS estimates a 2.69% chance of exploitation in the next 30 days, higher than 85.6% of scored vulnerabilities.
Timeline
- 10-04-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain privileges by modifying the "zero page" during a race condition before the view is unmapped.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.69%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
-0.02 pp
From 2.71% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- windows_2003_servergold | sp1 | sp2
1 vendor · 1 product
References
12 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1639VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-022Vendor AdvisoryX Refsource MS
Show all 12 references
- www.us-cert.gov/cas/techalerts/TA07-100A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- research.eeye.com/html/advisories/published/AD20070410a.htmlX Refsource MISC