CVE-2007-0041 The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an....
HighCVSS 9.3
EPSS 30.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net framework | = 1.0 | No fix listed |
| Microsoft net framework | = 1.1 | No fix listed |
| Microsoft net framework | = 2.0 | No fix listed |
References
- SSRT071446 vendor-advisory
- 35954 vdb-entry
- 26003 third-party-advisory vendor-advisory
- 24778 vdb-entry
- 1018356 vdb-entry
- TA07-191A third-party-advisory us-government-resource
- ADV-2007-2482 vdb-entry vendor-advisory
- MS07-040 vendor-advisory
- ms-dotnet-pe-loader-bo(34637) vdb-entry
- oval:org.mitre.oval:def:2093 signature vdb-entry