CVE-2007-6377
BadBlue <2.72b - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.
Exploits (5)
nomisec
NO CODE
1 stars
by Nicoslo · poc
https://github.com/Nicoslo/Windows-exploitation-BadBlue-2.7-CVE-2007-6377
exploitdb
WORKING POC
VERIFIED
by Jacopo Cervini · perlremotewindows
https://www.exploit-db.com/exploits/4784
metasploit
WORKING POC
GREAT
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/badblue_passthru.rb
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16806
References (9)
Scores
EPSS
0.8278
EPSS Percentile
99.2%
Classification
CWE
CWE-119
Status
draft
Affected Products (1)
badblue/badblue
< 2.72b
Timeline
Published
Dec 15, 2007
Tracked Since
Feb 18, 2026