CVE-2007-3038

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 35.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-10 · updated 2026-06-16

Description

The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability."

Affected products

Microsoft Windows Vista: all versions

References

http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
http://osvdb.org/35952
http://secunia.com/advisories/26001
http://www.kb.cert.org/vuls/id/101321
http://www.securityfocus.com/archive/1/473294/100/0/threaded
http://www.securityfocus.com/bid/24779
http://www.securitytracker.com/id?1018354
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-005.txt
http://www.us-cert.gov/cas/techalerts/TA07-191A.html
http://www.vupen.com/english/advisories/2007/2480
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-038
https://exchange.xforce.ibmcloud.com/vulnerabilities/35322

Get alerted when CVE-2007-3038 or the next vulnerability affects your stack