CVE-2007-2228: High severity Microsoft Windows 2003 Server vulnerability
rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2228?
CVE-2007-2228 has a severity rating that indicates it can lead to denial of service, causing system instability.
How do I fix CVE-2007-2228?
To mitigate CVE-2007-2228, it's recommended to apply the latest security updates from Microsoft for affected systems.
Which versions of Windows are affected by CVE-2007-2228?
CVE-2007-2228 affects Microsoft Windows XP SP2, Windows Server 2003 SP1 and SP2, and Windows Vista.
What kind of attack does CVE-2007-2228 enable?
CVE-2007-2228 allows remote attackers to stop the RPCSS service, leading to a denial of service on the affected Windows systems.
Is there a workaround for CVE-2007-2228?
While no official workaround exists, restricting remote access and disabling unnecessary services may help mitigate risks until updates are applied.