Vulnerability Details CVE-2007-2218
Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.502
EPSS Ranking 97.7%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/25620
- http://www.kb.cert.org/vuls/id/810073
- http://www.securityfocus.com/archive/1/471947/100/0/threaded
- http://www.securityfocus.com/archive/1/471947/100/0/threaded
- http://www.securityfocus.com/bid/24416
- http://www.securitytracker.com/id?1018226
- http://www.us-cert.gov/cas/techalerts/TA07-163A.html
- http://www.vupen.com/english/advisories/2007/2151
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-031
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1895
- http://secunia.com/advisories/25620
- http://www.kb.cert.org/vuls/id/810073
- http://www.securityfocus.com/archive/1/471947/100/0/threaded
- http://www.securityfocus.com/archive/1/471947/100/0/threaded
- http://www.securityfocus.com/bid/24416
- http://www.securitytracker.com/id?1018226
- http://www.us-cert.gov/cas/techalerts/TA07-163A.html
- http://www.vupen.com/english/advisories/2007/2151
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-031
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1895
Products affected by CVE-2007-2218
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_2003_server:sp1
-
cpe:2.3:o:microsoft:windows_2003_server:sp2
-
cpe:2.3:o:microsoft:windows_xp:-