CVE-2007-1748

Critical

Description

Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.

SeverityCritical

CVSS10.0

Exploit probability—

Product

Microsoft Windows

PublishedApr 13, 2007

First seenApr 13, 2007

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-029

Affected products

Product	Affected versions	Fixed in
microsoft windows_2000	No range specified	—
microsoft windows_2003_server	sp1, sp2	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.