CVEvulnerability
CVE-2007-3039
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
Affected configurations
• microsoft message queuing
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/28011 Vendor Advisory
- http://secunia.com/advisories/28051 Vendor Advisory
- http://www.securityfocus.com/archive/1/484891/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/485268/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26797 www.securityfocus.com
- http://www.securitytracker.com/id?1019077 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-345A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/4181 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-076.html www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474 oval.cisecurity.org
- https://www.exploit-db.com/exploits/4745 www.exploit-db.com
- https://www.exploit-db.com/exploits/4760 www.exploit-db.com
- https://www.exploit-db.com/exploits/4934 www.exploit-db.com
- http://secunia.com/advisories/28011 Vendor Advisory
- http://secunia.com/advisories/28051 Vendor Advisory
- http://www.securityfocus.com/archive/1/484891/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/485268/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26797 www.securityfocus.com
- http://www.securitytracker.com/id?1019077 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-345A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/4181 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-076.html www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474 oval.cisecurity.org
- https://www.exploit-db.com/exploits/4745 www.exploit-db.com
- https://www.exploit-db.com/exploits/4760 www.exploit-db.com
- https://www.exploit-db.com/exploits/4934 www.exploit-db.com