CVE-2007-1537: \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allow...

Security readout for executives and security teams

This is an old local denial-of-service issue in Microsoft Windows XP SP2 and Windows Server 2003 SP1. A user who can already log on locally may be able to crash the system through weak permissions on the NDIS TAPI device driver. The supplied sources do not show active exploitation. Exposure is most plausible on legacy Windows XP SP2 or Windows Server 2003 SP1 systems still in use, especially where untrusted users have local, terminal, or compromised account access. Modern supported Windows versions are not identified as affected in the supplied sources. Treat this as a legacy exposure and resilience issue, not an internet-scale emergency. Priority rises if XP SP2 or Server 2003 SP1 systems remain operational with shared user access or business-critical roles. Unsupported systems should be isolated or retired through a managed risk plan. Mitigation focus: Identify and inventory Windows XP SP2 and Windows Server 2003 SP1 assets.; Check Microsoft or vendor guidance for any historical fix or supported workaround.; Remove, isolate, or upgrade unsupported legacy Windows systems where feasible..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.