CVE-2007-1531
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.498 Medium
EPSS
Percentile
97.5%
Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to cause a denial of service (loss of network access) by sending a gratuitous ARP for the address of the Vista host.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_vista | microsoft windows vista | eq | * |
| microsoft:windows_xp | microsoft windows xp | eq | * |
References
osvdb.org/33664
www.securityfocus.com/archive/1/462793/100/0/threaded
www.securityfocus.com/archive/1/464617/100/0/threaded
www.securityfocus.com/bid/23266
www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf
www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.498 Medium
EPSS
Percentile
97.5%