CVE ID:	CVE-2007-2228
Description:	rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service (RPCSS service stop and system restart) via an RPC request that uses NTLMSSP PACKET authentication with a zero-valued verification trailer signature, which triggers an invalid dereference. NOTE: this also affects Windows 2000 SP4, although the impact is an information leak.
Test IDs:	1.3.6.1.4.1.25623.1.0.801712
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2228 BugTraq ID: 25974 http://www.securityfocus.com/bid/25974 Bugtraq: 20071010 ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability (Google Search) http://www.securityfocus.com/archive/1/482023/100/0/threaded Cert/CC Advisory: TA07-282A http://www.us-cert.gov/cas/techalerts/TA07-282A.html HPdes Security Advisory: HPSBST02280 http://www.securityfocus.com/archive/1/482366/100/0/threaded HPdes Security Advisory: SSRT071480 http://www.securityfocus.com/archive/1/482366/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-07-055.html Microsoft Security Bulletin: MS07-058 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-058 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2310 http://securitytracker.com/id?1018787 http://secunia.com/advisories/27134 http://secunia.com/advisories/27153 http://www.vupen.com/english/advisories/2007/3438