CVE Vulnerability

CVE-2007-1535

Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf
http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html
http://www.securityfocus.com/bid/23267
http://osvdb.org/33667
http://www.securityfocus.com/archive/1/464617/100/0/threaded
http://www.securityfocus.com/archive/1/462793/100/0/threaded
Configurations

Configuration 1

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
Information

Published : 2007-03-20 08:19

Updated : 2018-10-16 04:38

NVD link : CVE-2007-1535

Mitre link : CVE-2007-1535

Products Affected
No products.
CWE
NVD-CWE-Other