CVE-2007-0940 Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to...
HighCVSS 9.3
EPSS 75.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft biztalk server | = 2004-sp1 | No fix listed |
| Microsoft biztalk server | = 2004-sp2 | No fix listed |
| Microsoft capicom | All versions | No fix listed |
References
- 25185 third-party-advisory
- VU#866305 third-party-advisory us-government-resource
- 34397 vdb-entry
- HPSBST02214 vendor-advisory
- 23782 vdb-entry
- 1018016 vdb-entry
- 1018017 vdb-entry
- TA07-128A third-party-advisory us-government-resource
- ADV-2007-1713 vdb-entry
- MS07-028 vendor-advisory
- ms-capicom-code-execution(32739) vdb-entry
- oval:org.mitre.oval:def:1670 signature vdb-entry