CVE-2007-6043

Published: Nov 20, 2007Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.

Affected (1)

Products: Microsoft: Windows 2000

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://eprint.iacr.org/2007/419.pdf

Source: cve@mitre.org

http://www.computerworld.com.au/index.php/id%3B1165210682%3Bfp%3B2%3Bfpid%3B1

Source: cve@mitre.org

http://www.securityfocus.com/bid/26495

Source: cve@mitre.org

http://eprint.iacr.org/2007/419.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.computerworld.com.au/index.php/id%3B1165210682%3Bfp%3B2%3Bfpid%3B1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26495

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.