CVE-2007-6377

BadBlue <2.72b - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.

Exploits (5)

nomisec NO CODE 1 stars
by Nicoslo · poc
https://github.com/Nicoslo/Windows-exploitation-BadBlue-2.7-CVE-2007-6377
exploitdb WORKING POC
remotewindows
https://www.exploit-db.com/exploits/4715
exploitdb WORKING POC VERIFIED
by Jacopo Cervini · perlremotewindows
https://www.exploit-db.com/exploits/4784
metasploit WORKING POC GREAT
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/badblue_passthru.rb
exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16806

Scores

EPSS 0.8278
EPSS Percentile 99.2%

Classification

CWE
CWE-119
Status draft

Affected Products (1)

badblue/badblue < 2.72b

Timeline

Published Dec 15, 2007
Tracked Since Feb 18, 2026