CVE-2007-0211

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-13 · updated 2026-06-16

Description

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."

Affected products

Microsoft Windows 2003 Server: sp1
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/24126
http://www.kb.cert.org/vuls/id/240796
http://www.osvdb.org/31890
http://www.securityfocus.com/bid/22481
http://www.securitytracker.com/id?1017633
http://www.us-cert.gov/cas/techalerts/TA07-044A.html
http://www.vupen.com/english/advisories/2007/0575
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224
http://secunia.com/advisories/24126
http://www.kb.cert.org/vuls/id/240796
http://www.osvdb.org/31890

Get alerted when CVE-2007-0211 or the next vulnerability affects your stack