PT-2007-2920 · Microsoft · Windows Vista

Published 2007-03-20 · Updated 2018-10-16 · CVE-2007-1530

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description The issue is related to the LLTD Mapper in Microsoft Windows Vista, which does not properly handle responses to EMIT packets. This allows remote attackers to cause a denial of service, specifically a mapping failure, by omitting an ACK response. The omission of the ACK response triggers an XML syntax error.

Recommendations For Microsoft Windows Vista, consider applying configuration changes to handle EMIT packet responses properly to prevent mapping failures. As a temporary workaround, restrict access to the LLTD Mapper to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1530

Affected Products

Windows Vista

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-1530 · Security Note
• http://symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf · Note
• http://securityfocus.com/bid/23271 · Note
• http://securityfocus.com/archive/1/462793/100/0/threaded · Note
• http://osvdb.org/33660 · Note
• http://symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html · Note
• http://securityfocus.com/archive/1/464617/100/0/threaded · Note