CVE-2007-5352

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-08 · updated 2026-06-16
Weakness: CWE-264

Description

Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: sp1, sp2
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/28341
http://securitytracker.com/id?1019165
http://www.kb.cert.org/vuls/id/410025
http://www.securityfocus.com/archive/1/486317/100/0/threaded
http://www.securityfocus.com/bid/27099
http://www.us-cert.gov/cas/techalerts/TA08-008A.html
http://www.vupen.com/english/advisories/2008/0070
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-002
https://exchange.xforce.ibmcloud.com/vulnerabilities/39233
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5408
http://secunia.com/advisories/28341
http://securitytracker.com/id?1019165

Get alerted when CVE-2007-5352 or the next vulnerability affects your stack