Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Windows Vista LLTD can be tricked to impersonate other computers

CVE-2007-1529 · published 19 years ago
Summary

The Link‑Layer Topology Discovery service in Windows Vista can be fooled by a fake response on the network, causing it not to reply to a legitimate discovery request. This lets an attacker make the computer appear as another device on the same network, which could be used to intercept or redirect traffic. Apply the latest Microsoft update or disable LLTD if the feature is not needed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft windows_vista All versions
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
Original advisory text
The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arb...
The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
10% chance of attack within 30 days
Timeline
Published20 Mar 2007
Updated16 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-1529 · NVD
Track software like this
Free during beta