CVE-2007-1083
Estado: ModificadaAlta (9.3)—
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 8.29%
- Percentil entre todas las CVEs puntuadas: 95
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://attrition.org/pipermail/vim/2007-February/001384.html
- http://attrition.org/pipermail/vim/2007-February/001385.html
- http://jvn.jp/cert/JVNVU%23308087/index.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
- http://osvdb.org/33479
- http://secunia.com/advisories/24249
- http://www.jpcert.or.jp/at/2007/at070006.txt
- http://www.kb.cert.org/vuls/id/308087
- http://www.securityfocus.com/bid/22671
- http://www.securityfocus.com/bid/22676
- http://www.securitytracker.com/id?1017692
- http://www.securitytracker.com/id?1017693
- http://www.securitytracker.com/id?1017694
- http://www.vupen.com/english/advisories/2007/0702
- https://download.verisign.co.jp/support/announce/20070216.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32639
- http://attrition.org/pipermail/vim/2007-February/001384.html
- http://attrition.org/pipermail/vim/2007-February/001385.html
- http://jvn.jp/cert/JVNVU%23308087/index.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
- http://osvdb.org/33479
- http://secunia.com/advisories/24249
- http://www.jpcert.or.jp/at/2007/at070006.txt
- http://www.kb.cert.org/vuls/id/308087
- http://www.securityfocus.com/bid/22671
- http://www.securityfocus.com/bid/22676
- http://www.securitytracker.com/id?1017692
- http://www.securitytracker.com/id?1017693
- http://www.securitytracker.com/id?1017694
- http://www.vupen.com/english/advisories/2007/0702
- https://download.verisign.co.jp/support/announce/20070216.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32639
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-1083",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-02-23T02:28:00.000",
"references": [
{
"url": "http://attrition.org/pipermail/vim/2007-February/001384.html",
"source": "cve@mitre.org"
},
{
"url": "http://attrition.org/pipermail/vim/2007-February/001385.html",
"source": "cve@mitre.org"
},
{
"url": "http://jvn.jp/cert/JVNVU%23308087/index.html",
"source": "cve@mitre.org"
},
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/33479",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/24249",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.jpcert.or.jp/at/2007/at070006.txt",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/308087",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/22671",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/22676",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1017692",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1017693",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1017694",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/0702",
"source": "cve@mitre.org"
},
{
"url": "https://download.verisign.co.jp/support/announce/20070216.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32639",
"source": "cve@mitre.org"
},
{
"url": "http://attrition.org/pipermail/vim/2007-February/001384.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://attrition.org/pipermail/vim/2007-February/001385.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://jvn.jp/cert/JVNVU%23308087/index.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/33479",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/24249",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.jpcert.or.jp/at/2007/at070006.txt",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/308087",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/22671",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/22676",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1017692",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1017693",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1017694",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/0702",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://download.verisign.co.jp/support/announce/20070216.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32639",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method."
},
{
"lang": "es",
"value": "Un desbordamiento de búfer en el control ActiveX de Configuration Checker (ConfigChk) en la biblioteca VSCnfChk.dll versión 2.0.0.0.2 para Verisign Managed PKI Service, Secure Messaging para Microsoft Exchange y Go Secure!, permite a atacantes remotos ejecutar código arbitrario por medio de argumentos largos en el método VerCompare."
}
],
"lastModified": "2026-06-16T22:36:54.717",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:verisign:mpki:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4C59422-2D27-46E2-B224-03D839518671",
"versionEndIncluding": "6.1.3"
},
{
"criteria": "cpe:2.3:a:verisign:mpki:4.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B9334BE-2B55-4AEE-B5A3-7FAA3767057F"
},
{
"criteria": "cpe:2.3:a:verisign:mpki:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5AE7972-3BBC-4247-8524-B90D8980269A"
},
{
"criteria": "cpe:2.3:a:verisign:mpki:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CD4AA8E-D8A0-48F2-AE50-AB38E6C96699"
},
{
"criteria": "cpe:2.3:a:verisign:mpki:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42581C0F-9F47-4BF3-A95E-EC03871889DF"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}