Buffer overflow in Microsoft .Net Framework
CVE-2007-0041
The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
Vulnerability class: Buffer Overflow
EPSS: 0.307 (98.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft .Net_framework — versions 1.0, 1.1, 2.0
- Microsoft Windows_2000
- Microsoft Windows_2003_server
- Microsoft Windows_vista
- Microsoft Windows_xp
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_HP, vendor-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)