The hardware detection functionality in the Windows Shell in Microsoft...

Vulnerability Description

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."

References

• http://www.vupen.com/english/advisories/2007/0575
• http://www.kb.cert.org/vuls/id/240796
• http://secunia.com/advisories/24126
• http://www.securitytracker.com/id?1017633
• http://www.us-cert.gov/cas/techalerts/TA07-044A.html
• http://www.securityfocus.com/bid/22481
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A224
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-006
• http://www.osvdb.org/31890