CVEvulnerability
CVE-2007-1204
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:A/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.
Affected configurations
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=509 labs.idefense.com
- http://secunia.com/advisories/24822 Vendor Advisory
- http://www.osvdb.org/34010 www.osvdb.org
- http://www.securityfocus.com/archive/1/466331/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23371 www.securityfocus.com
- http://www.securitytracker.com/id?1017895 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1323 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-019 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2049 oval.cisecurity.org
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=509 labs.idefense.com
- http://secunia.com/advisories/24822 Vendor Advisory
- http://www.osvdb.org/34010 www.osvdb.org
- http://www.securityfocus.com/archive/1/466331/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23371 www.securityfocus.com
- http://www.securitytracker.com/id?1017895 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1323 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-019 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2049 oval.cisecurity.org