Vulnerability CVE-2007-1083
Published: 2007-02-22   Modified: 2012-02-12

Description:
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Verisign -> MPKI 

 References:
http://www.kb.cert.org/vuls/id/308087
https://download.verisign.co.jp/support/announce/20070216.html
http://xforce.iss.net/xforce/xfdb/32639
http://www.vupen.com/english/advisories/2007/0702
http://www.securitytracker.com/id?1017694
http://www.securitytracker.com/id?1017693
http://www.securitytracker.com/id?1017692
http://www.securityfocus.com/bid/22676
http://www.securityfocus.com/bid/22671
http://www.jpcert.or.jp/at/2007/at070006.txt
http://secunia.com/advisories/24249
http://osvdb.org/33479
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
http://jvn.jp/cert/JVNVU%23308087/index.html
http://attrition.org/pipermail/vim/2007-February/001385.html
http://attrition.org/pipermail/vim/2007-February/001384.html
Copyright 2024, cxsecurity.com

 

Back to Top