Main
Vulnerability Database
Exploits
ID:605 - Exploit for Privilege escalation in Windows - CVE-2007-1213
ID:605 - Exploit for Privilege escalation in Windows - CVE-2007-1213
Published: March 18, 2020
Vulnerability identifier: #VU1381
Vulnerability risk: Low
CVE-ID: CVE-2007-1213
CWE-ID: CWE-119
Exploitation vector: Local access
Vulnerable software:
Windows
Windows
Link to public exploit:
Vulnerability description
The vulnerability allows a local attacker to obtain elevated privileges on vulnerable system.
The vulnerability exists in the TrueType Fonts rasterizer when processing specially crafted fonts. A local user can create a specially crafted font file, call an uninitialized function pointer and execute arbitrary code on vulnerable system with elevated privileges.
Successful exploitation of this vulnerability may allow a local user to obtain full access to vulnerable system.
Remediation
Install the following updates from Microsoft website:
Microsoft Windows 2000 Service Pack 4 — Download the update