CVEvulnerability
CVE-2007-0041
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
Affected configurations
• microsoft .net framework 1.0
• microsoft .net framework 1.1
• microsoft .net framework 2.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html archive.cert.uni-stuttgart.de
- http://osvdb.org/35954 osvdb.org
- http://secunia.com/advisories/26003 Vendor Advisory
- http://www.securityfocus.com/bid/24778 www.securityfocus.com
- http://www.securitytracker.com/id?1018356 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-191A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2482 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34637 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093 oval.cisecurity.org
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html archive.cert.uni-stuttgart.de
- http://osvdb.org/35954 osvdb.org
- http://secunia.com/advisories/26003 Vendor Advisory
- http://www.securityfocus.com/bid/24778 www.securityfocus.com
- http://www.securitytracker.com/id?1018356 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-191A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2482 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34637 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093 oval.cisecurity.org