Lucene search

[email protected]CVE-2007-2374

HistoryApr 30, 2007 - 11:19 p.m.

CVE-2007-2374

2007-04-3023:19:00

[email protected]

web.nvd.nist.gov

cve-2007-2374

microsoft windows

vulnerability

user-assisted

remote attackers

arbitrary code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.5 Medium

EPSS

Percentile

97.5%

JSON

Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source.

Affected configurations

NVD

Node

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000sp4

microsoftwindows_2003_serversp1itanium

microsoftwindows_2003_serverMatchdatacenter

microsoftwindows_2003_serverMatchenterprise

microsoftwindows_2003_serverMatchenterprise64-bit

microsoftwindows_2003_serverMatchenterpriseitanium

microsoftwindows_2003_serverMatchenterpriseitanium_sp1_beta_1

microsoftwindows_2003_serverMatchenterprisesp1

microsoftwindows_2003_serverMatchenterprisesp1_beta_1

microsoftwindows_2003_serverMatchitanium

microsoftwindows_2003_serverMatchstandard

microsoftwindows_2003_serverMatchstandard64-bit

microsoftwindows_2003_serverMatchstandardsp1

microsoftwindows_2003_serverMatchstandardsp1_beta_1

microsoftwindows_2003_serverMatchweb

microsoftwindows_2003_serverMatchwebsp1

microsoftwindows_2003_serverMatchwebsp1_beta_1

microsoftwindows_xpgold

microsoftwindows_xpsp164-bit_2003

microsoftwindows_xpsp1embedded

microsoftwindows_xpsp1home

microsoftwindows_xpsp1media_center

microsoftwindows_xpsp1professional

microsoftwindows_xpsp1tablet_pc

microsoftwindows_xpsp2home

microsoftwindows_xpsp2media_center

microsoftwindows_xpsp2professional

microsoftwindows_xpsp2tablet_pc

Node

microsoftwindows_2000

AND

avayamedia_server

avayadefinity_one_media_server

avayas3400

avayas8100

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqitanium
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_xpmicrosoft windows xpeq*

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	itanium
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_xp	microsoft windows xp	eq	*

References

osvdb.org/35637

research.eeye.com/html/advisories/upcoming/20070327.html

www.securityfocus.com/bid/23332

exchange.xforce.ibmcloud.com/vulnerabilities/34444

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.5 Medium

EPSS

Percentile

97.5%

JSON

Related for CVE-2007-2374

cvelist1 nvd1 prion1