CVE-2007-3039

CVE-2007-3039 describes a stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service RPC interface. A long string in an opnum 0x06 RPC call to port 2103 can allow remote code execution on affected systems. The vulnerable products and versions include Windows 2000 Server SP4, Wind...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-076.html December 11, 2007 -- CVE ID: CVE-2007-3039 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 -- TippingPointTM IPS...

MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29309;...

Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)

...

CVE-2006-3039

CVE-2006-3039: A Cross-site Scripting (XSS) vulnerability in Cescripts Realty Home Rent, exploitable via the sel_menu parameter in index.php. The issue allows remote attackers to inject arbitrary script/HTML. The vendor stated on 2006-08-23 that “All issues concerning this script and others at ce...

CVE-2005-3039

CVE-2005-3039 describes an SQL injection in Mall23 eCommerce where the infopage.asp script processes the idPage parameter, enabling remote arbitrary SQL execution. The issue arises from improper handling of user-supplied input in the SQL query, consistent with the CVSS data indicating network acc...