CVE-2007-1535 Misconfiguration in n/a
Windows Vista automatically enables Teredo IPv6 tunneling, exposing the system to remote attackers despite documentation claiming it is inactive by default.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-1535?
CVE-2007-1535 is a high-severity vulnerability in Microsoft Windows Vista, published on 20 Mar 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo.
Which versions are affected by CVE-2007-1535?
It affects 1 product.
Products include Microsoft Windows Vista.
How do I fix CVE-2007-1535?
No fix has been published for CVE-2007-1535 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-1535 being exploited?
There is no known exploitation of CVE-2007-1535 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows Vista
Sources
Also known as GHSA-w7pw-g7cc-7j3p.