CVE-2007-1973

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-11 · updated 2026-06-16

Description

Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.

Affected products

Microsoft Windows Nt: 4.0

References

http://osvdb.org/37635
http://research.eeye.com/html/advisories/published/AD20070410a.html
http://securityreason.com/securityalert/2563
http://www.securityfocus.com/archive/1/465232/100/0/threaded
http://osvdb.org/37635
http://research.eeye.com/html/advisories/published/AD20070410a.html
http://securityreason.com/securityalert/2563
http://www.securityfocus.com/archive/1/465232/100/0/threaded

Get alerted when CVE-2007-1973 or the next vulnerability affects your stack