CVE-2007-3491: Buffer Overflow
First published: Fri Jun 29 2007(Updated: )
Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP message.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Progress OpenEdge Explorer | =9.1e | |
| Progress OpenEdge Explorer | =10.1a | |
| Progress OpenEdge Explorer | =10.1b |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf
- http://secunia.com/advisories/25865
- http://securityreason.com/securityalert/2851
- http://osvdb.org/37747
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35104
- http://www.securityfocus.com/archive/1/472349/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-3491?
CVE-2007-3491 is classified with a high severity due to its potential for remote exploitation and impacts on system integrity.
How do I fix CVE-2007-3491?
To fix CVE-2007-3491, you should upgrade to the latest patched version of Progress OpenEdge, specifically version 9.1E0422 or 10.1B01 and later.
Who is affected by CVE-2007-3491?
CVE-2007-3491 affects users of Progress OpenEdge versions 9.1E and 10.1A and B prior to the specified patched versions.
What does CVE-2007-3491 exploit?
CVE-2007-3491 exploits a buffer overflow vulnerability in the _mprosrv component of Progress OpenEdge.
Can CVE-2007-3491 be exploited remotely?
Yes, CVE-2007-3491 can be exploited remotely through a malformed TCP/IP message.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/progress
- canonical/progress openedge explorer
- version/progress openedge explorer/9.1e
- version/progress openedge explorer/10.1a
- version/progress openedge explorer/10.1b