The Just In Time (JIT) Compiler service in Microsoft .NET...
Vulnerability Description
The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0043
Credits & Attribution
No credits recorded in the NVD database.
References
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040
- http://www.vupen.com/english/advisories/2007/2482
- http://osvdb.org/35956
- http://secunia.com/advisories/26003
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1873
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34639
- http://www.us-cert.gov/cas/techalerts/TA07-191A.html
- http://www.securitytracker.com/id?1018356
- http://www.securityfocus.com/bid/24811
More from microsoft
View All →Affected Vendor
microsoft
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.