CVE-2007-1973

high

Description

Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.

References

http://www.securityfocus.com/archive/1/465232/100/0/threaded

http://securityreason.com/securityalert/2563

http://research.eeye.com/html/advisories/published/AD20070410a.html

http://osvdb.org/37635

Details

Source: Mitre, NVD

Published: 2007-04-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.01382