CVE-2007-0940

CRITICAL 9.3CVE-2007-0940 · Published 08/05/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
biztalk server microsoft	`= 2004`	No fix yet

Description

Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."

References

secunia.com/advisories/25185
kb.cert.org/vuls/id/866305 · US Government Resource
osvdb.org/34397
securityfocus.com/archive/1/468871/100/200/threaded
securityfocus.com/bid/23782
securitytracker.com/id
securitytracker.com/id
us-cert.gov/cas/techalerts/TA07-128A.html · US Government Resource
vupen.com/english/advisories/2007/1713
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-028
exchange.xforce.ibmcloud.com/vulnerabilities/32739
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1670

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free