CVE-2007-1535
- State
- Published
- Severity
- Not scored
- Published
- Mar 20, 2007
- Updated
- Aug 7, 2024
- Reserved
- Mar 20, 2007
Description
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 33667vdb-entry
- http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf
- 20070313 New report on Windows Vista network attack surfacemailing-list
- 20070403 Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentationmailing-list
- http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html
- 23267vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.