CVE-2007-0940
Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 75.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 75.68% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/biztalk server · microsoft/capicom
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/25185
- http://www.kb.cert.org/vuls/id/866305US Government Resource
- http://www.osvdb.org/34397
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/23782
- http://www.securitytracker.com/id?1018016
- http://www.securitytracker.com/id?1018017
- http://www.us-cert.gov/cas/techalerts/TA07-128A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/1713
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32739
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1670
- http://secunia.com/advisories/25185
- http://www.kb.cert.org/vuls/id/866305US Government Resource
- http://www.osvdb.org/34397
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/23782
- http://www.securitytracker.com/id?1018016
- http://www.securitytracker.com/id?1018017
- http://www.us-cert.gov/cas/techalerts/TA07-128A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/1713
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32739
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1670
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.