CVE-2007-0938

CRITICAL 10.0CVE-2007-0938 · Published 10/04/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
content management server microsoft	`= 2001= 2002`	No fix yet

Description

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

References

secunia.com/advisories/24819
kb.cert.org/vuls/id/434137 · US Government Resource
osvdb.org/34006
securityfocus.com/archive/1/466331/100/200/threaded
securityfocus.com/bid/22861
securitytracker.com/id
vupen.com/english/advisories/2007/1322
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018
exchange.xforce.ibmcloud.com/vulnerabilities/32736
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2001

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free