CVE-2007-0084

MediumCVSS 6.6/10Last modified Jun 16, 2026

Description

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed

Metrics

CVSS 2.0 6.6/10AV:L/AC:M/Au:S/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 5, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-00856.0Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiledCVE-2007-00867.8The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of servicCVE-2007-00877.8Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cCVE-2007-00885.0Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) src pCVE-2007-00897.5jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00907.5WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dataCVE-2007-00917.5newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a daCVE-2007-00927.5SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the producCVE-2007-00937.5SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands viCVE-2007-00947.5Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2007-00955.0phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, wCVE-2007-00967.5CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa
CVE-2007-0084: Medium severity, CVSS 6.6 | Vulnix