CVE-2007-3463

CVE-2007-3463 describes a vulnerability in Microsoft Windows XP SP2 where a local user, leveraging sessions created by another user's RunAs command, can terminate arbitrary processes belonging to that other user. This issue carries a CVSS score of 4.6 (AV:L/AC:L/Au:S/C:N/I:N/A:C), indicating a low-complexity attack requiring local access and user authentication, resulting in a complete loss of availability for the affected processes. Despite the potential for denial of service, the vendor considered RunAs a convenience feature, not a security boundary. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.