CVE-2007-3038 in the critical feed json
The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote…
published 2007-07-10 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3030
- cvss
- 7.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 35.2%
- EPSS 35.2% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability."
Exploit prediction
35.17% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:C/I:N/A:N |
References
-
archive.cert.uni-stuttgart.de
/bugtraq/2007/07/msg00254.html
vendor-advisory
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2007/ms07-038
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35322
vdb-entry
-
vupen.com
/english/advisories/2007/2480
vdb-entry
- symantec.com /content/en/us/enterprise/research/SYMSA-2007-005.txt
-
securityfocus.com
/bid/24779
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1884
vdb-entry, signature
-
securityfocus.com
/archive/1/473294/100/0/threaded
mailing-list
-
kb.cert.org
/vuls/id/101321
third-party-advisory, us-government-resource
-
securitytracker.com
/id?1018354
vdb-entry
-
osvdb.org
/35952
vdb-entry
-
us-cert.gov
/cas/techalerts/TA07-191A.html
third-party-advisory, us-government-resource
-
secunia.com
/advisories/26001
third-party-advisory
Sources
- CVE List CVE-2007-3038
- NVD CVE-2007-3038
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.