CVE-2007-5351: Code Injection

Published Dec 12, 2007

Updated

Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."

Affected Software

2 affected components

Microsoft Windows Vista=gold

Event History

Dec 12, 2007

CVE Published

12:46 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5351?

CVE-2007-5351 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-5351?

To fix CVE-2007-5351, apply the latest security patches provided by Microsoft for Windows Vista.

Which systems are affected by CVE-2007-5351?

CVE-2007-5351 affects Microsoft Windows Vista, specifically the gold version for both x86 and x64 architectures.

What are the risks associated with CVE-2007-5351?

The risks include the possibility of remote attackers executing arbitrary code on vulnerable systems.

What is SMBv2 and its relation to CVE-2007-5351?

SMBv2, or Server Message Block Version 2, is a network file sharing protocol, and CVE-2007-5351 exploits its signing support vulnerability.