CVEvulnerability
CVE-2007-1083
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
Affected configurations
• verisign mpki (<= 6.1.3)
• verisign mpki 4.6.1
• verisign mpki 5.0
• verisign mpki 6.0
• verisign mpki 7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://attrition.org/pipermail/vim/2007-February/001384.html attrition.org
- http://attrition.org/pipermail/vim/2007-February/001385.html attrition.org
- http://jvn.jp/cert/JVNVU%23308087/index.html jvn.jp
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479 labs.idefense.com
- http://osvdb.org/33479 osvdb.org
- http://secunia.com/advisories/24249 Vendor Advisory
- http://www.jpcert.or.jp/at/2007/at070006.txt www.jpcert.or.jp
- http://www.kb.cert.org/vuls/id/308087 US Government Resource
- http://www.securityfocus.com/bid/22671 www.securityfocus.com
- http://www.securityfocus.com/bid/22676 www.securityfocus.com
- http://www.securitytracker.com/id?1017692 www.securitytracker.com
- http://www.securitytracker.com/id?1017693 www.securitytracker.com
- http://www.securitytracker.com/id?1017694 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0702 www.vupen.com
- https://download.verisign.co.jp/support/announce/20070216.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32639 exchange.xforce.ibmcloud.com
- http://attrition.org/pipermail/vim/2007-February/001384.html attrition.org
- http://attrition.org/pipermail/vim/2007-February/001385.html attrition.org
- http://jvn.jp/cert/JVNVU%23308087/index.html jvn.jp
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479 labs.idefense.com
- http://osvdb.org/33479 osvdb.org
- http://secunia.com/advisories/24249 Vendor Advisory
- http://www.jpcert.or.jp/at/2007/at070006.txt www.jpcert.or.jp
- http://www.kb.cert.org/vuls/id/308087 US Government Resource
- http://www.securityfocus.com/bid/22671 www.securityfocus.com
- http://www.securityfocus.com/bid/22676 www.securityfocus.com
- http://www.securitytracker.com/id?1017692 www.securitytracker.com
- http://www.securitytracker.com/id?1017693 www.securitytracker.com
- http://www.securitytracker.com/id?1017694 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0702 www.vupen.com
- https://download.verisign.co.jp/support/announce/20070216.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32639 exchange.xforce.ibmcloud.com