CVE-2007-0043 The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via u...
HighCVSS 9.3
EPSS 30.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net framework | = 1.0 | No fix listed |
| Microsoft net framework | = 1.1 | No fix listed |
| Microsoft net framework | = 2.0 | No fix listed |
References
- SSRT071446 vendor-advisory
- 35956 vdb-entry
- 26003 third-party-advisory vendor-advisory
- 24811 vdb-entry
- 1018356 vdb-entry
- TA07-191A third-party-advisory us-government-resource
- ADV-2007-2482 vdb-entry vendor-advisory
- MS07-040 vendor-advisory
- ms-dotnet-jit-bo(34639) vdb-entry
- oval:org.mitre.oval:def:1873 signature vdb-entry