CVE-2007-0041
Published Jul 10, 2007
Last updated 6 years ago
Overview
- Description
- The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
- Source
- secure@microsoft.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "685F1981-EA61-4A00-89F8-A748A88962F8"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EAA86830-BEA8-4943-83EA-C267FA534223"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B47EBFCC-1828-45AB-BC6D-FB980929A81A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "766661C0-6A35-4F62-8325-3840A75CF3B4"
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A927C9E-5CCC-4FC1-AE63-24B96A5FC51A"
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A419F50E-F32C-461C-95D0-978C5351FBAA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]