CVE-2007-0041

Microsoft .NET Framework 1.0, 1.1, 2.0 - Remote Code Execution via Unchecked Buffer

Title source: llm

Description

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.

References (10)

Core 10

Core References

Various Sources vendor-advisory x_refsource_hp

http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/2482

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/35954

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26003

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA07-191A.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/24778

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34637

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018356

Scores

EPSS 0.3067

EPSS Percentile 98.0%

Details

CWE

CWE-119

Status published

Products (3)

microsoft/.net_framework 1.0

microsoft/.net_framework 1.1

microsoft/.net_framework 2.0

Published Jul 10, 2007

Tracked Since Feb 18, 2026