Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability

Bugtraq ID: 23338
Class: Design Error
CVE: CVE-2007-1209
Remote: No
Local: Yes
Published: Apr 10 2007 12:00AM
Updated: Mar 27 2008 01:09PM
Credit: eEye is credited with the discovery of this issue.
Vulnerable: Nortel Networks Centrex IP Client Manager 8.0
Nortel Networks Centrex IP Client Manager 7.0
Nortel Networks Centrex IP Client Manager 9.0
Microsoft Windows Vista x64 Edition 0
Microsoft Windows Vista Ultimate
Microsoft Windows Vista Home Premium
Microsoft Windows Vista Home Basic
Microsoft Windows Vista Enterprise
Microsoft Windows Vista Business
HP Storage Management Appliance 2.1
+ HP Storage Management Appliance III
+ HP Storage Management Appliance II
+ HP Storage Management Appliance I
Avaya Web Messenger 0
Avaya VPNmanagerTM Console 0
Avaya Visual Vector Client 0
Avaya Visual Messenger TM 0
Avaya Unified Messenger (r) 0
Avaya Unified Communication Center
Avaya Speech Access 0
Avaya Outbound Contact Management 0
Avaya Operational Analyst 0
Avaya OctelDesignerTM 0
Avaya OctelAccess(r) Server 0
Avaya Network Reporting 0
Avaya Modular Messaging (MAS)
Avaya Messaging Application Server MM 3.1
Avaya Messaging Application Server MM 3.0
Avaya Messaging Application Server MM 2.0
Avaya Messaging Application Server 0
Avaya IP Softphone 0
Avaya IP Agent 0
Avaya Interaction Center - Voice Quick Start 0
Avaya Interaction Center 0
Avaya Integrated Management
Avaya Enterprise Management 0
Avaya CVLAN
Avaya Customer Interaction Express (CIE) User Interface 1.0
Avaya Customer Interaction Express (CIE) Server 1.0
Avaya Contact Center Express 0
Avaya Computer Telephony 0
Avaya CMS Supervisor 0
Avaya Basic Call Management System Reporting Desktop server
Avaya Basic Call Management System Reporting Desktop 0
Avaya Agent Access 0
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus