PT-2007-1148 · Microsoft · Biztalk Server 2004+1

Publicado

2007-05-08

·

Atualizado

2018-10-16

·

CVE-2007-0940

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2
Description: The issue is related to an unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control, which can allow remote attackers to execute arbitrary code. This vulnerability is associated with errors in code generation management. The exploitation of this issue may enable a remote attacker to execute arbitrary code.
Recommendations: For Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2019-01970
CVE-2007-0940

Produtos afetados

Biztalk Server 2004
Capicom