CVE-2007-2219

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 31.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-12 · updated 2026-06-16

Description

Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: sp1, sp2
Microsoft Windows XP Service Pack 3: all versions

References

http://osvdb.org/35341
http://secunia.com/advisories/25640
http://www.kb.cert.org/vuls/id/457281
http://www.securityfocus.com/archive/1/471947/100/0/threaded
http://www.securityfocus.com/bid/24370
http://www.securitytracker.com/id?1018230
http://www.us-cert.gov/cas/techalerts/TA07-163A.html
http://www.vupen.com/english/advisories/2007/2155
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-035
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1643
http://osvdb.org/35341
http://secunia.com/advisories/25640

Get alerted when CVE-2007-2219 or the next vulnerability affects your stack