ByteOS Network

NVD Vulnerability Details :

CVE-2007-2228

Modified

Source-secure@microsoft.com

Published At-09 Oct, 2007 | 22:17

Updated At-16 Oct, 2018 | 16:42

rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Microsoft Corporation

>>windows_2000>>*

cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:*:professional:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/27134	secure@microsoft.com	Vendor Advisory
http://secunia.com/advisories/27153	secure@microsoft.com	Vendor Advisory
http://securitytracker.com/id?1018787	secure@microsoft.com	N/A
http://www.securityfocus.com/archive/1/482023/100/0/threaded	secure@microsoft.com	N/A
http://www.securityfocus.com/archive/1/482366/100/0/threaded	secure@microsoft.com	N/A
http://www.securityfocus.com/bid/25974	secure@microsoft.com	N/A
http://www.us-cert.gov/cas/techalerts/TA07-282A.html	secure@microsoft.com	US Government Resource
http://www.vupen.com/english/advisories/2007/3438	secure@microsoft.com	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-055.html	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2310	secure@microsoft.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History