<< Back
CVE Number Vulnerability Product Severity Date
MS07-022 Vulnerability in Windows Kernel Could Allow Elevation of Privilege (931784) Microsoft Windows Critical 11-04-2007

Technical Information

Brief overview of the risk:
A privilege elevation vulnerability exists in Windows Kernel because of incorrect permissions on a mapped memory segment. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
Detailed Information on the risk:
MS07-022 patches a local privilege escalation vulnerability caused by the way the Windows Kernel maps memory. The attacker would need to upload a maliciously crafted binary and execute it on the victim machine to take complete control of the host.Further information on this exploit is available at : MS07-022

Affected Software

Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 2
Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1, and Microsoft 2003 Service Pack 2