CVE-2007-5352: High severity Microsoft Windows XP vulnerability

Published Jan 8, 2008

Updated

Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.

Affected Software

4 affected components

Microsoft Windows XP=sp2

Microsoft Windows 2000=sp4

Microsoft Windows 2003 Server=sp1

Microsoft Windows 2003 Server=sp2

Remediation

Patch Available

http://secunia.com/advisories/28341

Event History

Jan 8, 2008

CVE Published

08:46 PM

Jan 9, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5352?

CVE-2007-5352 has a high severity rating due to the potential privilege escalation it allows to local users.

How do I fix CVE-2007-5352?

To fix CVE-2007-5352, update your system to the latest service pack or security update recommended by Microsoft.

What systems are affected by CVE-2007-5352?

CVE-2007-5352 affects Microsoft Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1 and SP2.

What type of vulnerability is CVE-2007-5352?

CVE-2007-5352 is a local privilege escalation vulnerability in the Local Security Authority Subsystem Service (LSASS).

Can CVE-2007-5352 be exploited remotely?

CVE-2007-5352 is not remotely exploitable as it requires local access to the system to perform the attack.