CVE-2007-1209
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows...
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.
- Record
CVE-2007-1209- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.
- Record
CVE-2007-1209- Updated
- 2026-11-02
EUVDEUVD-2007-1206 No score
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.
- Record
EUVD-2007-1206- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pf7m-rhv2-rhj9 No score
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows...
Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.
- Record
GHSA-pf7m-rhv2-rhj9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1209 is a high vulnerability (CVSS 7.2) in Microsoft Windows Vista, published April 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.77%, the 86th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/466331/100/200/threaded
securitytracker.com/id?1017897
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021
kb.cert.org/vuls/id/219848
Show 9 moreShow less
vupen.com/english/advisories/2007/1325
osvdb.org/34008
securityreason.com/securityalert/2531
secunia.com/advisories/24823
research.eeye.com/html/advisories/published/AD20070410b.html
us-cert.gov/cas/techalerts/TA07-100A.html
nvd.nist.gov/vuln/detail/CVE-2007-1209
github.com/advisories/GHSA-pf7m-rhv2-rhj9