CVE-2007-1658

CVE-2007-1658 is a critical-severity vulnerability in Microsoft Windows Vista with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 36% places it in the 98th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).

Frequently asked questions

What is CVE-2007-1658?
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).
How severe is CVE-2007-1658?
CVE-2007-1658 has a CVSS 2.0 base score of 9.3, rated critical severity.
Is CVE-2007-1658 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 36% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-1658?
CVE-2007-1658 primarily affects Microsoft Windows Vista. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-1658?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2007-1658 published?
CVE-2007-1658 was published on 2007-03-24 and last updated on 2026-06-16.

References

Affected products (5)

More vulnerabilities in Microsoft Windows Vista

All CVEs affecting Microsoft Windows Vista →