Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-1967
http://www.securityfocus.com/archive/1/465232/100/0/threaded
http://securityreason.com/securityalert/2563
http://research.eeye.com/html/advisories/published/AD20070410a.html