PT-2008-1403 · Microsoft · Windows

Published 2008-01-08 · Updated 2021-09-13 · CVE-2007-0066

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, and Server 2003

Description The issue allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read when ICMP Router Discovery Protocol (RDP) is enabled.

Recommendations For Microsoft Windows 2000 SP4, XP SP2, and Server 2003, consider disabling ICMP Router Discovery Protocol (RDP) to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0066

Affected Products

Windows

References · 14

• http://secunia.com/advisories/28297 · Vendor Advisory
• http://securityfocus.com/archive/1/486317/100/0/threaded · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0066 · Security Note
• http://vupen.com/english/advisories/2008/0069 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39254 · Note
• http://securitytracker.com/id?1019166 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5271 · Note
• http://iss.net/threats/282.html · Note
• https://t.me/cvenotify/20723 · Telegram Post
• http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0066 · Note
• http://securityfocus.com/bid/27139 · Note
• http://us-cert.gov/cas/techalerts/TA08-008A.html · Note