CVE-2007-0041

high · 9.3

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.

9.3

CVSS

30.7%

EPSS (exploit prob.)

98th

EPSS percentile

2007-07-10

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
microsoft	windows_2000	all versions
microsoft	windows_2003_server	all versions
microsoft	windows_vista	all versions
microsoft	windows_xp	all versions
microsoft	.net_framework	1.0
microsoft	.net_framework	1.1
microsoft	.net_framework	2.0

Check a specific version with /api/v1/cve/match.

References

http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
http://osvdb.org/35954
http://secunia.com/advisories/26003
http://www.securityfocus.com/bid/24778
http://www.securitytracker.com/id?1018356
http://www.us-cert.gov/cas/techalerts/TA07-191A.html
http://www.vupen.com/english/advisories/2007/2482
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040
https://exchange.xforce.ibmcloud.com/vulnerabilities/34637
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093
http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
http://osvdb.org/35954
http://secunia.com/advisories/26003
http://www.securityfocus.com/bid/24778
http://www.securitytracker.com/id?1018356
http://www.us-cert.gov/cas/techalerts/TA07-191A.html
http://www.vupen.com/english/advisories/2007/2482
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040
https://exchange.xforce.ibmcloud.com/vulnerabilities/34637
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-0041