CVE-2007-0066: High severity Microsoft Windows XP vulnerability

Published Jan 8, 2008

Updated

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."

Affected Software

11 affected components

Microsoft Windows XP=sp2

Microsoft Windows 2000=sp4

Microsoft Windows Server 2003

Microsoft Home Server

Microsoft Windows 2003 Server=gold

Microsoft Windows 2003 Server=sp1

Microsoft Windows Server 2003=sp2

Microsoft Windows 2003 Server=sp2

Microsoft Small Business Server=2003

Microsoft Windows XP=sp1

Remediation

Patch Available

http://secunia.com/advisories/28297

Event History

Jan 8, 2008

CVE Published

08:46 PM

Jan 9, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0066?

CVE-2007-0066 has a severity that allows remote attackers to cause a denial of service.

How do I fix CVE-2007-0066?

To fix CVE-2007-0066, ensure that ICMP Router Discovery Protocol is disabled and apply necessary updates.

Which systems are affected by CVE-2007-0066?

CVE-2007-0066 affects Microsoft Windows 2000 SP4, Windows XP SP2, and Windows Server 2003.

What kind of attack is associated with CVE-2007-0066?

CVE-2007-0066 is associated with denial of service attacks caused by fragmented ICMP packets.

Can CVE-2007-0066 be exploited remotely?

Yes, CVE-2007-0066 can be exploited remotely by attackers sending crafted ICMP packets.