CVE-2007-0066

CVE-2007-0066 is a denial-of-service vulnerability affecting the kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 when ICMP Router Discovery Protocol (RDP) is enabled. Remote attackers can exploit this by sending fragmented router advertisement ICMP packets, leading to an out-of-bounds read. This vulnerability has a CVSS score of 7.1, indicating high severity, and allows for a complete denial of service (A:C) with medium attack complexity (AC:M) and no authentication required (Au:N). The EPSS score and FAUCET Risk Score suggest a notable potential for impact despite its age. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with a large percentage of older vulnerabilities.