Back to search
CVE-2007-0938
Published: Apr 10, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
HPSBST02208
vendor-advisory
x_refsource_HP
34006
vdb-entry
x_refsource_OSVDB
ADV-2007-1322
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:2001
vdb-entry
signature
x_refsource_OVAL
1017894
vdb-entry
x_refsource_SECTRACK
VU#434137
third-party-advisory
x_refsource_CERT-VN
mcms-http-get-code-execution(32736)
vdb-entry
x_refsource_XF
MS07-018
vendor-advisory
x_refsource_MS
22861
vdb-entry
x_refsource_BID
24819
third-party-advisory
x_refsource_SECUNIA
SSRT071365
vendor-advisory
x_refsource_HP
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now