Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
Threat-Mapped Scoring
Score: 1.5
Priority: P4 - Informational (Low)
S10 – Denial of Service
EPSS
Score: 0.00598 Percentile:
0.684
CVSS Scoring
CVSS v2 Score: 4.0
Severity:
Mapped CWE(s)
CWE-362
: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
All CAPEC(s)
CAPEC-26: Leveraging Race Conditions
CAPEC-29: Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions