PT-2007-2924 · Microsoft · Windows Vista+1

Published 2007-03-20 · Updated 2018-10-16 · CVE-2007-1534

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description The issue concerns DFSR.exe in Windows Meeting Space, which remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed. This allows remote attackers to potentially exploit the system by connecting to this port during the specified time window. The exact impact of this issue is not detailed.

Recommendations For Microsoft Windows Vista, consider restricting access to TCP port 5722 as a temporary mitigation measure until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1534

Affected Products

Windows Meeting Space

Windows Vista

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-1534 · Security Note
• http://symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf · Note
• http://securityfocus.com/archive/1/462793/100/0/threaded · Note
• http://osvdb.org/33668 · Note
• http://symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html · Note
• http://securityfocus.com/archive/1/464617/100/0/threaded · Note