Overview
A vulnerability in the way Microsoft Content Managment Server handles HTTP requests may lead to execution of arbitrary code.
Description
Microsoft Content Managment Server (CMS) contains a vulnerability that could be exploited when it attempts to process specially crafted HTTP requests. According to Microsoft Security Bulletin MS07-018: A remote code execution vulnerability results from the way that the Microsoft Content Management Server handles unexpected characters in an HTTP request. |
Impact
A remote, unauthenticated attacker may be able to execute arbitrary code or cause a denial-of-service condition. |
Solution
Update Microsoft has released an update to address this issue. See Microsoft Security Bulletin MS07-018 for more details. |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was reported in Microsoft Security Bulletin MS07-018.
This document was written by Chris Taschner.
Other Information
| CVE IDs: | CVE-2007-0938 |
| Severity Metric: | 42.53 |
| Date Public: | 2007-04-10 |
| Date First Published: | 2007-04-17 |
| Date Last Updated: | 2007-04-17 13:50 UTC |
| Document Revision: | 11 |