CVE-2007-0087 describes a denial-of-service vulnerability in Microsoft Internet Information Services (IIS). Attackers can exploit this by sending a crafted Range header with multiple copies of the same fragment over a TCP connection with a large window size, leading to significant network bandwidth consumption. This vulnerability has a CVSS score of 7.8 (High), indicating a network-based attack with low complexity and a complete impact on availability. Despite its age, there is no public exploit code (Metasploit, Nuclei, ExploitDB) and minimal community discussion or media coverage, suggesting it is not actively exploited.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.