Executive Summary
| Summary | |
|---|---|
| Title | Vulnerability in CAPICOM Could Allow Remote Code Execution (931906) |
| Informations | |||
|---|---|---|---|
| Name | MS07-028 | First vendor Publication | 2007-05-08 |
| Vendor | Microsoft | Last vendor Modification | 2007-05-08 |
| Severity (Vendor) | Critical | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.3 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| This update resolves a newly discovered, privately reported vulnerability. The vulnerability is documented in its own subsection in the Vulnerability Details section of this bulletin. |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1670 | |||
| Oval ID: | oval:org.mitre.oval:def:1670 | ||
| Title: | CAPICOM.Certificates Vulnerability | ||
| Description: | Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2007-0940 | Version: | 7 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista | Product(s): | Microsoft Capicom |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 34397 | Microsoft CAPICOM CAPICOM.Certificates ActiveX (CAPICOM.dll) Remote Code Exec... A remote memory corruption flaw exists in CAPICOM. It fails to validate unspecified input resulting in memory corruption. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity. |
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2007-05-10 | IAVM : 2007-T-0015 - Microsoft CAPICOM Remote Code Vulnerability Severity : Category II - VMSKEY : V0014222 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2016-03-14 | Microsoft CAPICOM CAPICOM.Certificates ActiveX clsid access attempt RuleID : 37044 - Revision : 2 - Type : BROWSER-PLUGINS |
| 2016-03-14 | Microsoft CAPICOM CAPICOM.Certificates ActiveX clsid access attempt RuleID : 37043 - Revision : 2 - Type : BROWSER-PLUGINS |
| 2016-03-14 | Microsoft CAPICOM CAPICOM.Certificates ActiveX clsid access attempt RuleID : 37042 - Revision : 2 - Type : BROWSER-PLUGINS |
| 2016-03-14 | Microsoft CAPICOM CAPICOM.Certificates ActiveX clsid access attempt RuleID : 37041 - Revision : 2 - Type : BROWSER-PLUGINS |
| 2016-03-14 | Microsoft CAPICOM CAPICOM.Certificates ActiveX clsid access attempt RuleID : 37040 - Revision : 2 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Cryptographic API COM 2 ActiveX clsid unicode access RuleID : 11235 - Revision : 6 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Cryptographic API COM 2 ActiveX clsid access RuleID : 11234 - Revision : 11 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Cryptographic API COM 1 ActiveX function call unicode access RuleID : 11233 - Revision : 6 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft CAPICOM CAPICOM.Certificates ActiveX clsid access attempt RuleID : 11232 - Revision : 11 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Cryptographic API COM 1 ActiveX clsid unicode access RuleID : 11231 - Revision : 6 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Cryptographic API COM 1 ActiveX clsid access RuleID : 11230 - Revision : 11 - Type : BROWSER-PLUGINS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2007-05-09 | Name : Arbitrary code can be executed on the remote host through the web browser. File : smb_nt_ms07-028.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:45:41 |
|
| 2014-01-19 21:30:04 |
|
| 2013-11-11 12:41:05 |
|
| 2013-05-11 12:22:00 |
|
