CVE-2007-1211: microsoft windows_2003_server Resource Management Errors

EPSS trend

Probability

29.07%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 29.07% on 19-09-2026

19-09-202619-10-2026

EPSS score

29.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaselocalwindowsVerified
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
Maturity: weaponized
exploit-databaselocalwindowsVerified
Microsoft Windows - GDI Privilege Escalation (MS07-017) (2)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Maturity: weaponized

References

8 links

www.vupen.com/english/advisories/2007/1215VDB EntryX Refsource VUPENVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1571VDB EntrySignatureX Refsource OVAL
www.securitytracker.com/id?1017843VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/23275VDB EntryX Refsource BID
www.securityfocus.com/archive/1/466186/100/200/threadedVendor AdvisoryX Refsource HP
exchange.xforce.ibmcloud.com/vulnerabilities/33258VDB EntryX Refsource XF
labs.idefense.com/intelligence/vulnerabilities/display.php?id=499Third Party AdvisoryX Refsource IDEFENSE
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017Vendor AdvisoryX Refsource MS

Related vulnerabilities

CVE-2005-2388microsoftwindows_2003_server1.81%21y ago27-07-2005 04:00Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.CVE-2005-1212microsoftwindows_2003_server24.92%21y ago14-06-2005 04:00Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.CVE-2005-1218microsoftwindows_2003_server57.34%21y ago10-08-2005 04:00The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.CVE-2005-1649microsoftwindows_2003_server21.78%21y ago18-05-2005 04:00The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the "Land" vulnerability (CVE-1999-0016).CVE-2005-1214microsoftwindows_2003_server12.84%21y ago14-06-2005 04:00Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.CVE-2005-1184microsoftwindows_2003_server+132.75%21y ago19-04-2005 04:00The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that this issue could not be replicated.

All vulnerabilities inwindows_2003_server

CVE-2007-1211: microsoft windows_2003_server Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References