NVD

Id
54395  
Name
CVE-2007-2228  
Description
rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-10-09  
Modified Date
2011-03-07  
Seq
2007-2228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275872 54395 CVE-2007-2228 oval:org.mitre.oval:def:2310  View
275873 54395 CVE-2007-2228 1018787  View
275874 54395 CVE-2007-2228 MS07-058  View
275875 54395 CVE-2007-2228 20071010 ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability  View
275876 54395 CVE-2007-2228 HPSBST02280  View
275877 54395 CVE-2007-2228 25974  View
275878 54395 CVE-2007-2228 TA07-282A  View
275879 54395 CVE-2007-2228 ADV-2007-3438  View
275880 54395 CVE-2007-2228 http://www.zerodayinitiative.com/advisories/ZDI-07-055.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52098 JVNDB-2007-000761 Microsoft Windows における RPC ラインタイムライブラリにおけるサービス運用妨害 (DoS) の脆弱性 Microsoft Windows の RPC ランタイムライブラリ (rpcrt4.dll) には、NTLM セキュリティ プロバイダとの通信 (NTLMSSP パケット認証) の処理に不備が存在するために、RPC リクエストの認証を実行する際に、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-2228 25583 CVE-2007-2228 54395 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000761.html 2007-10-09 2007-11-02 View