[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110210

 
 

909

 
 

86021

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2007-3039Date: (C)2007-12-11   (M)2018-02-19


Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 9.0
Exploit Score: Exploit Score: 8.0
Impact Score: Impact Score: 10.0
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: LOW
Privileges Required: Authentication: SINGLE_INSTANCE
User Interaction: Confidentiality: COMPLETE
Scope: Integrity: COMPLETE
Confidentiality: Availability: COMPLETE
Integrity:  
Availability:  
  
Reference:
SECTRACK-1019077
http://www.securityfocus.com/archive/1/archive/1/484891/100/0/threaded
BID-26797
SECUNIA-28011
SECUNIA-28051
EXPLOIT-DB-4745
EXPLOIT-DB-4760
EXPLOIT-DB-4934
ADV-2007-4181
MS07-065
SSRT071506
TA07-345A
http://www.zerodayinitiative.com/advisories/ZDI-07-076.html

CPE    1
cpe:/a:microsoft:message_queuing
CWE    1
CWE-119
OVAL    1
oval:org.mitre.oval:def:4474

© SecPod Technologies