CVE Feed

    Dashboard / CVE / CVE-2007-3039

    CVE-2007-3039

    Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

    Published:Dec 12, 2007
    Last Modified:Apr 23, 2026
    EPS:Dec 12, 2007
    EPSS Score:0.8339
    CVSS Score:9

    Affected Products

    Vendor
    Microsoft
    Product
    Message Queuing
    Vendor
    Microsoft
    Product
    Windows 2000
    Vendor
    Microsoft
    Product
    Windows Xp

    Exploits

    https://www.exploit-db.com/exploits/16750https://www.exploit-db.com/exploits/4745https://www.exploit-db.com/exploits/4760https://www.exploit-db.com/exploits/4934

    References

    http://secunia.com/advisories/28011
    http://secunia.com/advisories/28051
    http://www.securityfocus.com/archive/1/484891/100/0/threaded
    http://www.securityfocus.com/archive/1/485268/100/0/threaded
    http://www.securityfocus.com/bid/26797
    http://www.securitytracker.com/id?1019077
    http://www.us-cert.gov/cas/techalerts/TA07-345A.html
    http://www.vupen.com/english/advisories/2007/4181
    http://www.zerodayinitiative.com/advisories/ZDI-07-076.html
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474
    https://www.exploit-db.com/exploits/4745
    https://www.exploit-db.com/exploits/4760
    https://www.exploit-db.com/exploits/4934
    http://secunia.com/advisories/28011
    http://secunia.com/advisories/28051
    http://www.securityfocus.com/archive/1/484891/100/0/threaded
    http://www.securityfocus.com/archive/1/485268/100/0/threaded
    http://www.securityfocus.com/bid/26797
    http://www.securitytracker.com/id?1019077
    http://www.us-cert.gov/cas/techalerts/TA07-345A.html
    http://www.vupen.com/english/advisories/2007/4181
    http://www.zerodayinitiative.com/advisories/ZDI-07-076.html
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474
    https://www.exploit-db.com/exploits/4745
    https://www.exploit-db.com/exploits/4760
    https://www.exploit-db.com/exploits/4934

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High