PT-2007-2924 · Microsoft · Windows Vista+1

Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1534

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description The issue concerns DFSR.exe in Windows Meeting Space, which remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed. This allows remote attackers to potentially exploit the system by connecting to this port during the specified time window. The exact impact of this issue is not detailed.

Recommendations For Microsoft Windows Vista, consider restricting access to TCP port 5722 as a temporary mitigation measure until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1534

Produtos afetados

Windows Meeting Space

Windows Vista

Referências · 6

• http://symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf · Nota
• http://securityfocus.com/archive/1/462793/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1534 · Nota de Segurança
• http://osvdb.org/33668 · Nota
• http://symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html · Nota
• http://securityfocus.com/archive/1/464617/100/0/threaded · Nota