CVE-2007-2417: Buffer Overflow
Heap-based buffer overflow in mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2417?
CVE-2007-2417 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-2417?
To mitigate CVE-2007-2417, upgrade to the latest versions of the affected products that address the buffer overflow issue.
What products are affected by CVE-2007-2417?
CVE-2007-2417 affects Progress Software Progress 9.1E, OpenEdge 10.1A and 10.1B, RSA Authentication Manager 6.0 and 6.1, and RSA ACE/Server 5.2.
What kind of attack is possible with CVE-2007-2417?
CVE-2007-2417 allows remote attackers to execute arbitrary code on vulnerable systems via crafted packets.
Is there a patch available for CVE-2007-2417?
Yes, vendors have released patches for CVE-2007-2417 that should be applied immediately to affected systems.