CVE

Id
24295  
CVE No.
CVE-2007-0938  
Status
Candidate  
Description
Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."  
Phase
Assigned (20070214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
238402 24295 CVE-2007-0938 HP:HPSBST02208  View
238403 24295 CVE-2007-0938 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
238404 24295 CVE-2007-0938 HP:SSRT071365  View
238405 24295 CVE-2007-0938 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
238406 24295 CVE-2007-0938 MS:MS07-018  View
238407 24295 CVE-2007-0938 URL:http://www.microsoft.com/technet/security/bulletin/ms07-018.mspx  View
238408 24295 CVE-2007-0938 CERT-VN:VU#434137  View
238409 24295 CVE-2007-0938 URL:http://www.kb.cert.org/vuls/id/434137  View
238410 24295 CVE-2007-0938 BID:22861  View
238411 24295 CVE-2007-0938 URL:http://www.securityfocus.com/bid/22861  View
238412 24295 CVE-2007-0938 VUPEN:ADV-2007-1322  View
238413 24295 CVE-2007-0938 URL:http://www.vupen.com/english/advisories/2007/1322  View
238414 24295 CVE-2007-0938 OSVDB:34006  View
238415 24295 CVE-2007-0938 URL:http://www.osvdb.org/34006  View
238416 24295 CVE-2007-0938 OVAL:oval:org.mitre.oval:def:2001  View
238417 24295 CVE-2007-0938 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2001  View
238418 24295 CVE-2007-0938 SECTRACK:1017894  View
238419 24295 CVE-2007-0938 URL:http://www.securitytracker.com/id?1017894  View
238420 24295 CVE-2007-0938 SECUNIA:24819  View
238421 24295 CVE-2007-0938 URL:http://secunia.com/advisories/24819  View
238422 24295 CVE-2007-0938 XF:mcms-http-get-code-execution(32736)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51954 JVNDB-2007-000617 Microsoft CAPICOM および BizTalk Serverにおける任意のコードを実行可能な脆弱性 Microsoft Cryptographic API Component Object Model Certificates (CAPICOM) および BizTalk Server の ActiveX コントロールには任意のコードを実行可能な脆弱性が存在します。 CVE-2007-0940 24295 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000617.html  View