CVE-2007-3039
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 69%
from disclosure to weapon956 days
Published on NVDDec 12
1st PoC+956d
metasploitDec 11
exploitation probability
69%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16750cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4745cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4934cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4760⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065http://secunia.com/advisories/28011http://secunia.com/advisories/28051https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474https://www.exploit-db.com/exploits/4745https://www.exploit-db.com/exploits/4760https://www.exploit-db.com/exploits/4934http://www.securityfocus.com/archive/1/484891/100/0/threadedhttp://www.securityfocus.com/archive/1/485268/100/0/threadedhttp://www.securityfocus.com/bid/26797http://www.securitytracker.com/id?1019077http://www.us-cert.gov/cas/techalerts/TA07-345A.html