CVE-2007-3036

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-12 · updated 2026-06-16
Weakness: CWE-264

Description

Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."

Affected products

Microsoft Windows 2003 Server: all versions
Microsoft Windows Services For Unix: 3.5, 3.0
Microsoft Windows Vista: all versions

References

http://secunia.com/advisories/26757
http://securitytracker.com/id?1018678
http://www.kb.cert.org/vuls/id/768440
http://www.osvdb.org/36935
http://www.securityfocus.com/bid/25620
http://www.us-cert.gov/cas/techalerts/TA07-254A.html
http://www.vupen.com/english/advisories/2007/3115
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-053
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1275
http://secunia.com/advisories/26757
http://securitytracker.com/id?1018678
http://www.kb.cert.org/vuls/id/768440

Get alerted when CVE-2007-3036 or the next vulnerability affects your stack