CVE-2007-1204

Published: Apr 10, 2007Modified: Apr 23, 2026

6.8

Vector

AV:A/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 3.2 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.

Affected (1)

Products: Microsoft: Windows Xp

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Xp	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=509

Source: secure@microsoft.com

http://secunia.com/advisories/24822

Source: secure@microsoft.com

Vendor Advisory

http://www.osvdb.org/34010

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/466331/100/200/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/23371

Source: secure@microsoft.com

http://www.securitytracker.com/id?1017895

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2007/1323

Source: secure@microsoft.com

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-019

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2049

Source: secure@microsoft.com

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=509

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24822

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/34010

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/466331/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23371

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017895

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1323

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-019

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2049

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.