PT-2007-2919 · Microsoft · Windows Vista

Published 2007-03-20 · Updated 2018-10-16 · CVE-2007-1529

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description The issue concerns a network-based race condition, known as the "Total Spoof" attack, where the LLTD Responder in Microsoft Windows Vista fails to send a response to a DISCOVERY packet if another host has sent a spoofed response first. This allows remote attackers to spoof arbitrary hosts.

Recommendations For Microsoft Windows Vista, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1529

Affected Products

Windows Vista

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-1529 · Security Note
• http://symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf · Note
• http://securityfocus.com/archive/1/462793/100/0/threaded · Note
• http://osvdb.org/33661 · Note
• http://securityfocus.com/archive/1/464617/100/0/threaded · Note
• http://securityfocus.com/bid/23263 · Note
• http://symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html · Note