VULNERABILITY INTELLIGENCE
CVE-2007-1537
CVSS score3.6 LOW
EPSS probability1.36%
CISA KEVNot currently listed
Published2007-03-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P
Description
\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.