CVE

Id
24561  
CVE No.
CVE-2007-1204  
Status
Candidate  
Description
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242105 24561 CVE-2007-1204 IDEFENSE:20070410 Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability  View
242106 24561 CVE-2007-1204 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=509  View
242107 24561 CVE-2007-1204 HP:HPSBST02208  View
242108 24561 CVE-2007-1204 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
242109 24561 CVE-2007-1204 HP:SSRT071365  View
242110 24561 CVE-2007-1204 URL:http://www.securityfocus.com/archive/1/archive/1/466331/100/200/threaded  View
242111 24561 CVE-2007-1204 MS:MS07-019  View
242112 24561 CVE-2007-1204 URL:http://www.microsoft.com/technet/security/bulletin/ms07-019.mspx  View
242113 24561 CVE-2007-1204 BID:23371  View
242114 24561 CVE-2007-1204 URL:http://www.securityfocus.com/bid/23371  View
242115 24561 CVE-2007-1204 VUPEN:ADV-2007-1323  View
242116 24561 CVE-2007-1204 URL:http://www.vupen.com/english/advisories/2007/1323  View
242117 24561 CVE-2007-1204 OSVDB:34010  View
242118 24561 CVE-2007-1204 URL:http://www.osvdb.org/34010  View
242119 24561 CVE-2007-1204 OVAL:oval:org.mitre.oval:def:2049  View
242120 24561 CVE-2007-1204 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2049  View
242121 24561 CVE-2007-1204 SECTRACK:1017895  View
242122 24561 CVE-2007-1204 URL:http://www.securitytracker.com/id?1017895  View
242123 24561 CVE-2007-1204 SECUNIA:24822  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51596 JVNDB-2007-000258 Microsoft Windows カーネルの Virtual DOS Machine における権限昇格の脆弱性 Microsoft Windows に実装されている Windows カーネルの Virtual DOS Machine (VDM) には、物理メモリビューに対しての不正確なアクセス許可のため、競合状態を発生させてゼロページを修正することで、権限を昇格される脆弱性が存在します。 CVE-2007-1206 24561 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000258.html  View