PT-2007-2920 · Microsoft · Windows Vista

Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1530

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description The issue is related to the LLTD Mapper in Microsoft Windows Vista, which does not properly handle responses to EMIT packets. This allows remote attackers to cause a denial of service, specifically a mapping failure, by omitting an ACK response. The omission of the ACK response triggers an XML syntax error.

Recommendations For Microsoft Windows Vista, consider applying configuration changes to handle EMIT packet responses properly to prevent mapping failures. As a temporary workaround, restrict access to the LLTD Mapper to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-1530

Produtos afetados

Windows Vista

Referências · 7

• http://symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf · Nota
• http://securityfocus.com/bid/23271 · Nota
• http://securityfocus.com/archive/1/462793/100/0/threaded · Nota
• http://osvdb.org/33660 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1530 · Nota de Segurança
• http://symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html · Nota
• http://securityfocus.com/archive/1/464617/100/0/threaded · Nota