Privilege escalation in Microsoft Windows - CVE-2007-1213

Vulnerability details

The vulnerability allows a local attacker to obtain elevated privileges on vulnerable system.

The vulnerability exists in the TrueType Fonts rasterizer when processing specially crafted fonts. A local user can create a specially crafted font file, call an uninitialized function pointer and execute arbitrary code on vulnerable system with elevated privileges.

Successful exploitation of this vulnerability may allow a local user to obtain full access to vulnerable system.

Affected software

How to mitigate CVE-2007-1213

Install the following updates from Microsoft website:
Microsoft Windows 2000 Service Pack 4 — Download the update

Links to Public Exploits and PoC-codes

• Exploit #604 - Microsoft Windows - '.ani' GDI Remote Elevation of Privilege Exploit (MS07-017) (March 18, 2020)
• Exploit #605 - Microsoft Windows - GDI Privilege Escalation (MS07-017) (2) (March 18, 2020)
• Exploit #606 - Microsoft Windows - GDI Privilege Escalation (MS07-017) (1) (March 18, 2020)

External References

• https://technet.microsoft.com/en-us/library/security/ms07-017.aspx

Related Security Bulletins

• Multiple privilege escalation vulnerabilities in Microsoft Windows