CVE-2007-0043: Buffer Overflow

Published Jul 10, 2007

Updated

The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".

Affected Software

7 affected components

Microsoft Windows 2000

Microsoft Windows 2003 Server

Microsoft Windows Vista

Microsoft Windows XP

Microsoft .NET Framework=1.0

Microsoft .NET Framework=1.1

Microsoft .NET Framework=2.0

Event History

Jul 10, 2007

CVE Published

10:30 PM

Data Sourced

10:30 PM

DescriptionWeaknessAffected Software

Jul 11, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0043?

CVE-2007-0043 is rated as a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2007-0043?

To fix CVE-2007-0043, update to a non-vulnerable version of the .NET Framework.

What systems are affected by CVE-2007-0043?

CVE-2007-0043 affects Microsoft .NET Framework versions 1.0, 1.1, and 2.0 on Windows 2000, XP, Server 2003, and Vista.

What type of vulnerability is CVE-2007-0043?

CVE-2007-0043 is classified as a buffer overflow vulnerability in the Just In Time Compiler service.

Can CVE-2007-0043 be exploited remotely?

Yes, CVE-2007-0043 can be exploited remotely if an attacker can lure a user into opening a specially crafted file.