Vulnerability Details : CVE-2007-1083

Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.

Vulnerability category: OverflowExecute code

Published 2007-02-23 02:28:00

Updated 2017-07-29 01:30:37

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-1083

Probability of exploitation activity in the next 30 days: 51.42%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-1083

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	[email protected]
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-1083

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: [email protected] (Primary)

References for CVE-2007-1083

Products affected by CVE-2007-1083

Verisign » Mpki
Versions up to, including, (<=) 6.1.3
cpe:2.3:a:verisign:mpki:*:*:*:*:*:*:*:*
Matching versions
Verisign » Mpki » Version: 6.0
cpe:2.3:a:verisign:mpki:6.0:*:*:*:*:*:*:*
Matching versions
Verisign » Mpki » Version: 5.0
cpe:2.3:a:verisign:mpki:5.0:*:*:*:*:*:*:*
Matching versions
Verisign » Mpki » Version: 7.0
cpe:2.3:a:verisign:mpki:7.0:*:*:*:*:*:*:*
Matching versions
Verisign » Mpki » Version: 4.6.1
cpe:2.3:a:verisign:mpki:4.6.1:*:*:*:*:*:*:*
Matching versions