CVE-2007-3038

The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability."

• http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
• http://osvdb.org/35952
• http://secunia.com/advisories/26001
• http://www.kb.cert.org/vuls/id/101321US Government Resource
• http://www.securityfocus.com/archive/1/473294/100/0/threaded
• http://www.securityfocus.com/bid/24779
• http://www.securitytracker.com/id?1018354
• http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-005.txt
• http://www.us-cert.gov/cas/techalerts/TA07-191A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/2480
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35322
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1884
• http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
• http://osvdb.org/35952
• http://secunia.com/advisories/26001
• http://www.kb.cert.org/vuls/id/101321US Government Resource
• http://www.securityfocus.com/archive/1/473294/100/0/threaded
• http://www.securityfocus.com/bid/24779
• http://www.securitytracker.com/id?1018354
• http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-005.txt
• http://www.us-cert.gov/cas/techalerts/TA07-191A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/2480
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35322
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1884

Published

Jul 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3032Unspecified vulnerability in Windows Vista Contacts Gadget i…
• CVE-2007-3033Cross-site scripting (XSS) vulnerability in Windows Vista Fe…
• CVE-2007-3034Integer overflow in the AttemptWrite function in Graphics Re…
• CVE-2007-3035Unspecified vulnerability in Microsoft Windows Media Player …
• CVE-2007-3036Unspecified vulnerability in the (1) Windows Services for UN…
• CVE-2007-3037Microsoft Windows Media Player 7.1, 9, 10, and 11 allows rem…
• CVE-2007-3039Stack-based buffer overflow in the Microsoft Message Queuing…
• CVE-2007-3040Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Mi…
• CVE-2007-3041Unspecified vulnerability in the pdwizard.ocx ActiveX object…
• CVE-2007-3042Cross-site scripting (XSS) vulnerability in Meneame before 2…
• CVE-2007-3043Cross-site scripting (XSS) vulnerability in Collaboration - …
• CVE-2007-3044Unspecified vulnerability in the Map I/O Service (xpwmap) in…