ID CVE-2007-0084
Summary Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:message_compiler:1.00.5239:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:message_compiler:1.00.5239:*:*:*:*:*:*:*
CVSS
Base: 6.6 (as of 11-04-2024 - 00:41)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:M/Au:S/C:C/I:C/A:C
refmap via4
bugtraq
  • 20070102 Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • 20070103 Re: Windows NT Message Compiler 1.00.5239 arbitrary code execution
osvdb 37817
Last major update 11-04-2024 - 00:41
Published 05-01-2007 - 11:28
Last modified 11-04-2024 - 00:41
Back to Top