Lucene search

[email protected]CVE-2007-6255

HistoryApr 23, 2008 - 1:05 p.m.

CVE-2007-6255

2008-04-2313:05:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-6255

buffer overflow

microsoft

heartbeatctl

activex control

hrtbeat.ocx

remote code execution

8.1 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.289 Low

EPSS

Percentile

96.9%

JSON

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method.

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq-
microsoft:windows_server_2003microsoft windows server 2003eq-
microsoft:windows_xpmicrosoft windows xpeq-
microsoft:windows_vistamicrosoft windows vistaeq-

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	-
microsoft:windows_server_2003	microsoft windows server 2003	eq	-
microsoft:windows_xp	microsoft windows xp	eq	-
microsoft:windows_vista	microsoft windows vista	eq	-

References

osvdb.org/44652

www.kb.cert.org/vuls/id/570089

www.securityfocus.com/bid/28882

docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069

exchange.xforce.ibmcloud.com/vulnerabilities/41940

8.1 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.289 Low

EPSS

Percentile

96.9%

JSON

Related for CVE-2007-6255

seebug1 prion1 cert1 cvelist1