Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2007-1204
HistoryApr 10, 2007 - 9:19 p.m.

CVE-2007-1204

2007-04-1021:19:00
CWE-119
microsoft
web.nvd.nist.gov
37
cve-2007-1204
stack-based buffer overflow
upnp service
windows xp sp2
remote code execution
crafted http headers
memory corruption
nvd

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.903

Percentile

98.9%

JSON

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.

Affected configurations

Nvd
Node
microsoftwindows_xpsp2
VendorProductVersionCPE
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Related

checkpoint_advisories 1
nessus 1
securityvulns 3
cvelist 1
prion 1
nvd 1
myhack58 1
checkpoint_advisories
checkpoint_advisories
Microsoft Windows UPnP Service Remote Code Execution (MS07-019; CVE-2007-1204)
2007-03-11 00:00:00
nessus
nessus
MS07-019: Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)
2007-04-10 00:00:00
securityvulns
securityvulns
Microsoft Windows Universal PnP memory corruption
2007-04-10 00:00:00
iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability
2007-04-10 00:00:00
Microsoft Security Bulletin MS07-019 Vulnerability in Universal Plug and Play Could Allow Remote Code Execution (931261)
2007-04-10 00:00:00
cvelist
cvelist
CVE-2007-1204
2007-04-10 21:00:00
prion
prion
Stack overflow
2007-04-10 21:19:00
nvd
nvd
CVE-2007-1204
2007-04-10 21:19:00
myhack58
myhack58
Next from the printer coming out will be?-- The theory of the UPnP using the status quo and risk-vulnerability warning-the black bar safety net
2019-03-29 00:00:00

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.903

Percentile

98.9%

JSON
Related for CVE-2007-1204
checkpoint_advisories1nessus1securityvulns3cvelist1prion1nvd1myhack581