Unscored CVE-2007-0938 EUVD-2007-0932GHSA-xx69-qcm3-mp67

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request,…

Published Apr 10, 2007 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

References

HPSBST02208 vendor-advisory
34006 vdb-entry
ADV-2007-1322 vdb-entry
oval:org.mitre.oval:def:2001 vdb-entry signature
1017894 vdb-entry
VU#434137 third-party-advisory
mcms-http-get-code-execution(32736) vdb-entry
MS07-018 vendor-advisory
22861 vdb-entry
24819 third-party-advisory