CVE-2007-1209

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-10 · updated 2026-06-16
Weakness: CWE-399

Description

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.

Affected products

Microsoft Windows Vista: all versions

References

http://research.eeye.com/html/advisories/published/AD20070410b.html
http://secunia.com/advisories/24823
http://securityreason.com/securityalert/2531
http://www.kb.cert.org/vuls/id/219848
http://www.osvdb.org/34008
http://www.securityfocus.com/archive/1/465233/100/0/threaded
http://www.securityfocus.com/archive/1/466331/100/200/threaded
http://www.securityfocus.com/bid/23338
http://www.securitytracker.com/id?1017897
http://www.us-cert.gov/cas/techalerts/TA07-100A.html
http://www.vupen.com/english/advisories/2007/1325
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021

Get alerted when CVE-2007-1209 or the next vulnerability affects your stack