CVE-2007-3491: Buffer Overflow

Published Jun 29, 2007

Updated

Buffer overflow in mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP message.

Affected Software

3 affected components

Progress OpenEdge=9.1e

Progress OpenEdge=10.1a

Progress OpenEdge=10.1b

Event History

Jun 29, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3491?

CVE-2007-3491 is classified with a high severity due to its potential for remote exploitation and impacts on system integrity.

How do I fix CVE-2007-3491?

To fix CVE-2007-3491, you should upgrade to the latest patched version of Progress OpenEdge, specifically version 9.1E0422 or 10.1B01 and later.

Who is affected by CVE-2007-3491?

CVE-2007-3491 affects users of Progress OpenEdge versions 9.1E and 10.1A and B prior to the specified patched versions.

What does CVE-2007-3491 exploit?

CVE-2007-3491 exploits a buffer overflow vulnerability in the _mprosrv component of Progress OpenEdge.

Can CVE-2007-3491 be exploited remotely?

Yes, CVE-2007-3491 can be exploited remotely through a malformed TCP/IP message.