CVE-2007-2218 Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denia...
HighCVSS 9.3
EPSS 12.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = sp1 | No fix listed |
| Microsoft windows 2003 server | = sp2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 25620 third-party-advisory
- VU#810073 third-party-advisory us-government-resource
- SSRT071438 vendor-advisory
- 24416 vdb-entry
- 1018226 vdb-entry
- TA07-163A third-party-advisory us-government-resource
- ADV-2007-2151 vdb-entry
- MS07-031 vendor-advisory
- oval:org.mitre.oval:def:1895 signature vdb-entry