VULNERABILITY INTELLIGENCE

CVE-2007-0436

CVSS score4.6 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2007-02-04
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.

Primary references