CVE-2007-5352 : Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS)

Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.

Published 2008-01-08 20:46:00

Updated 2018-10-15 21:43:58

Source Microsoft Corporation

View at NVD, CVE.org

Products affected by CVE-2007-5352

Microsoft » Windows 2000 » Update SP4
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP2
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Version: SP1
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Version: SP2
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-5352

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5352

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-5352

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5352

Jump to

Vulnerability Details : CVE-2007-5352

Products affected by CVE-2007-5352

Exploit prediction scoring system (EPSS) score for CVE-2007-5352

CVSS scores for CVE-2007-5352

CWE ids for CVE-2007-5352

References for CVE-2007-5352