CVE-2007-3039 Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrar...
HighCVSS 9.0
EPSS 69.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft message queuing | All versions | No fix listed |
References
- 28011 third-party-advisory vendor-advisory
- 28051 third-party-advisory vendor-advisory
- 20071211 ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability mailing-list
- SSRT071506 vendor-advisory
- 26797 vdb-entry
- 1019077 vdb-entry
- TA07-345A third-party-advisory us-government-resource
- ADV-2007-4181 vdb-entry
- www.zerodayinitiative.com
- MS07-065 vendor-advisory
- oval:org.mitre.oval:def:4474 signature vdb-entry
- 4745 exploit
- 4760 exploit
- 4934 exploit