National Cyber Awareness System

Vulnerability Summary for CVE-2007-1083

Overview

Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#308087

Name: VU#308087

Hyperlink:http://www.kb.cert.org/vuls/id/308087

External Source: CONFIRM

Name: https://download.verisign.co.jp/support/announce/20070216.html

Type: Advisory

Hyperlink:https://download.verisign.co.jp/support/announce/20070216.html

External Source: XF

Name: verisign-configchk-bo(32639)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32639

External Source: VUPEN

Name: ADV-2007-0702

Hyperlink:http://www.vupen.com/english/advisories/2007/0702

External Source: SECTRACK

Name: 1017694

Hyperlink:http://www.securitytracker.com/id?1017694

External Source: SECTRACK

Name: 1017693

Hyperlink:http://www.securitytracker.com/id?1017693

External Source: SECTRACK

Name: 1017692

Hyperlink:http://www.securitytracker.com/id?1017692

External Source: BID

Name: 22676

Hyperlink:http://www.securityfocus.com/bid/22676

External Source: BID

Name: 22671

Hyperlink:http://www.securityfocus.com/bid/22671

External Source: MISC

Name: http://www.jpcert.or.jp/at/2007/at070006.txt

Hyperlink:http://www.jpcert.or.jp/at/2007/at070006.txt

External Source: SECUNIA

Name: 24249

Type: Advisory

Hyperlink:http://secunia.com/advisories/24249

External Source: OSVDB

Name: 33479

Hyperlink:http://osvdb.org/33479

External Source: IDEFENSE

Name: 20070222 VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479

External Source: MISC

Name: http://jvn.jp/cert/JVNVU%23308087/index.html

Hyperlink:http://jvn.jp/cert/JVNVU%23308087/index.html

External Source: VIM

Name: 20070223 Verisign ConfigChk ActiveX Overflow(s)

Hyperlink:http://attrition.org/pipermail/vim/2007-February/001385.html

External Source: VIM

Name: 20070222 Verisign ConfigChk ActiveX Overflow(s)

Hyperlink:http://attrition.org/pipermail/vim/2007-February/001384.html