CVE-2007-2218

Windows Schannel Security Package - Remote Code Execution or Denial of Service via Crafted Digital Signatures

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.

References (9)

Core 9
Core References
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/810073
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24416
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25620
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/471947/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018226
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2151
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1895
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-163A.html

Scores

EPSS 0.1254
EPSS Percentile 95.8%

Details

Status published
Products (4)
microsoft/windows_2000
microsoft/windows_2003_server sp1
microsoft/windows_2003_server sp2
microsoft/windows_xp
Published Jun 12, 2007
Tracked Since Feb 18, 2026