CVE-2007-2228
First published: Tue Oct 09 2007(Updated: )
rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 2003 Server | =sp2 | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows Vista | ||
| Microsoft Windows 2000 | =sp4 | |
| Microsoft Windows Vista | ||
| Microsoft Windows 2003 Server | =sp1 | |
| Microsoft Windows XP | ||
| Microsoft Windows 2003 Server | =sp2 | |
| Microsoft Windows 2003 Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-07-055.html
- http://www.us-cert.gov/cas/techalerts/TA07-282A.html
- http://www.securityfocus.com/bid/25974
- http://securitytracker.com/id?1018787
- http://secunia.com/advisories/27134
- http://secunia.com/advisories/27153
- http://www.vupen.com/english/advisories/2007/3438
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2310
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058
- http://www.securityfocus.com/archive/1/482366/100/0/threaded
- http://www.securityfocus.com/archive/1/482023/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft windows 2003 server
- version/microsoft windows 2003 server/sp2
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- canonical/microsoft windows vista
- canonical/microsoft windows 2000
- version/microsoft windows 2000/sp4
- version/microsoft windows 2003 server/sp1