CVE-2007-6043
Last modified
CVE-2007-6043 is a vulnerability of currently unknown severity. The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.. EPSS estimates a 4.72% chance of exploitation in the next 30 days.
Description
The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-6043?
How severe is CVE-2007-6043?
How do I fix CVE-2007-6043?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-6037Cross-site scripting (XSS) vulnerability in ws/generic_api_c…
- CVE-2007-6038PHP remote file inclusion vulnerability in xajax_functions.p…
- CVE-2007-6039PHP 5.2.5 and earlier allows context-dependent attackers to …
- CVE-2007-6040The Belkin F5D7230-4 Wireless G Router allows remote attacke…
- CVE-2007-6041Buffer overflow in the Sequencer::queueMessage function in s…
- CVE-2007-6042PHP remote file inclusion vulnerability in fehler.inc.php in…
- CVE-2007-6044Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0…
- CVE-2007-6045Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE …
- CVE-2007-6046Unspecified vulnerability in unspecified setuid programs in …
- CVE-2007-6047Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB…
- CVE-2007-6048IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions o…
- CVE-2007-6049Unspecified vulnerability in the SSL LOAD GSKIT action in IB…
Are you affected by CVE-2007-6043?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST