Vulnerability Details : CVE-2007-3039
Public exploit exists!
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2007-3039
Probability of exploitation activity in the next 30 days: 97.39%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2007-3039
-
MS07-065 Microsoft Message Queueing Service DNS Name Path Overflow
Disclosure Date: 2007-12-11First seen: 2020-04-26exploit/windows/dcerpc/ms07_065_msmqThis module exploits a stack buffer overflow in the RPC interface to the Microsoft Message Queueing service. This exploit requires the target system to have been configured with a DNS name and for that name to be supplied in the 'DNAME' option. This name does not nee
CVSS scores for CVE-2007-3039
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
9.0
|
HIGH | AV:N/AC:L/Au:S/C:C/I:C/A:C |
8.0
|
10.0
|
NIST |
CWE ids for CVE-2007-3039
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2007-3039
-
http://www.zerodayinitiative.com/advisories/ZDI-07-076.html
-
http://www.securitytracker.com/id?1019077
-
http://www.vupen.com/english/advisories/2007/4181
-
https://www.exploit-db.com/exploits/4760
-
https://www.exploit-db.com/exploits/4745
-
https://www.exploit-db.com/exploits/4934
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474
- http://www.securityfocus.com/archive/1/485268/100/0/threaded
-
http://www.securityfocus.com/bid/26797
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065
-
http://www.securityfocus.com/archive/1/484891/100/0/threaded
-
http://www.us-cert.gov/cas/techalerts/TA07-345A.html
US Government Resource
Products affected by CVE-2007-3039
- cpe:2.3:a:microsoft:message_queuing:*:*:*:*:*:*:*:*