Back to CVE Browser

CVE-2007-5351

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1160%

EPSS Percentile27.90th

PublishedDec 12, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."

Affected Platforms (CPE)

💻

Microsoft

Windows Vista

All versions

💻

Microsoft

Windows Vista

All versions

References & Advisories

🔗 http://secunia.com/advisories/27997

🔗 http://www.kb.cert.org/vuls/id/520465

🔗 http://www.securityfocus.com/archive/1/485268/100/0/threaded

🔗 http://www.securityfocus.com/bid/26777

🔗 http://www.securitytracker.com/id?1019072

🔗 http://www.us-cert.gov/cas/techalerts/TA07-345A.html

🔗 http://www.vupen.com/english/advisories/2007/4179

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-063

Related Vulnerabilities

CVE-2008-008010.0

Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows re...

CVE-2008-403810.0

Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allow...

CVE-2007-006510.0

Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1...

CVE-2009-013710.0

Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote at...