CVE-2007-3039

Published: Dec 12, 2007Modified: Apr 23, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

Affected (1)

Products: Microsoft: Message Queuing

1 product

Message Queuing

Configuration A

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Microsoft Message Queuing	All versions

Running on/with	Platform Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows Xp	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://secunia.com/advisories/28011

Source: secure@microsoft.com

Vendor Advisory

http://secunia.com/advisories/28051

Source: secure@microsoft.com

Vendor Advisory

http://www.securityfocus.com/archive/1/484891/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/485268/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/26797

Source: secure@microsoft.com

http://www.securitytracker.com/id?1019077

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA07-345A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2007/4181

Source: secure@microsoft.com

http://www.zerodayinitiative.com/advisories/ZDI-07-076.html

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474

Source: secure@microsoft.com

https://www.exploit-db.com/exploits/4745

Source: secure@microsoft.com

https://www.exploit-db.com/exploits/4760

Source: secure@microsoft.com

https://www.exploit-db.com/exploits/4934

Source: secure@microsoft.com

http://secunia.com/advisories/28011

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28051

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/484891/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/485268/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26797

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019077

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA07-345A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2007/4181

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-07-076.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4745

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4760

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4934

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.