{"api_version":"1","generated_at":"2026-07-23T07:31:52+00:00","cve":"CVE-2007-1083","urls":{"html":"https://cve.report/CVE-2007-1083","api":"https://cve.report/api/cve/CVE-2007-1083.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1083","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1083"},"summary":{"title":"CVE-2007-1083","description":"Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-23 02:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/22671","name":"http://www.securityfocus.com/bid/22671","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VeriSign Configuration Checker ActiveX Control Remote Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/24249","name":"http://secunia.com/advisories/24249","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VeriSign ConfigChk ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1017692","name":"http://www.securitytracker.com/id?1017692","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VeriSign Managed PKI Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://osvdb.org/33479","name":"http://osvdb.org/33479","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1017693","name":"http://www.securitytracker.com/id?1017693","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VeriSign Go Secure! Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://attrition.org/pipermail/vim/2007-February/001385.html","name":"http://attrition.org/pipermail/vim/2007-February/001385.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[VIM] Verisign ConfigChk ActiveX Overflow(s)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1017694","name":"http://www.securitytracker.com/id?1017694","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VeriSign Secure Messaging for Microsoft Exchange Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32639","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32639","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22676","name":"http://www.securityfocus.com/bid/22676","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RETIRED: VeriSign ConfigCHK ActiveX Control VerCompare Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://jvn.jp/cert/JVNVU%23308087/index.html","name":"http://jvn.jp/cert/JVNVU%23308087/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVNVU#308087: ベリサインの ActiveX コントロールにおけるバッファオーバーフローの脆弱性","mime":"text/xml","httpstatus":"200","archivestatus":"404"},{"url":"https://download.verisign.co.jp/support/announce/20070216.html","name":"https://download.verisign.co.jp/support/announce/20070216.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/308087","name":"http://www.kb.cert.org/vuls/id/308087","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"VU#308087 - VeriSign Managed PKI Configuration Checker ActiveX control stack buffer overflow","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0702","name":"http://www.vupen.com/english/advisories/2007/0702","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://attrition.org/pipermail/vim/2007-February/001384.html","name":"http://attrition.org/pipermail/vim/2007-February/001384.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[VIM] Verisign ConfigChk ActiveX Overflow(s)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.jpcert.or.jp/at/2007/at070006.txt","name":"http://www.jpcert.or.jp/at/2007/at070006.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/cert/JVNVU#308087/index.html","name":"MISC:http://jvn.jp/cert/JVNVU%23308087/index.html","refsource":"MITRE","tags":[],"title":"","mime":"text/plain","httpstatus":"404","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1083","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1083","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"verisign","cpe5":"mpki","cpe6":"4.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"verisign","cpe5":"mpki","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"verisign","cpe5":"mpki","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1083","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"verisign","cpe5":"mpki","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1083","vulnerable":"1","versionEndIncluding":"6.1.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"verisign","cpe5":"mpki","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:22.551Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33479","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33479"},{"name":"24249","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24249"},{"name":"verisign-configchk-bo(32639)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32639"},{"name":"VU#308087","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/308087"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://jvn.jp/cert/JVNVU%23308087/index.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://download.verisign.co.jp/support/announce/20070216.html"},{"name":"20070223 Verisign ConfigChk ActiveX Overflow(s)","tags":["mailing-list","x_refsource_VIM","x_transferred"],"url":"http://attrition.org/pipermail/vim/2007-February/001385.html"},{"name":"1017693","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017693"},{"name":"22676","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22676"},{"name":"22671","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22671"},{"name":"20070222 Verisign ConfigChk ActiveX Overflow(s)","tags":["mailing-list","x_refsource_VIM","x_transferred"],"url":"http://attrition.org/pipermail/vim/2007-February/001384.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.jpcert.or.jp/at/2007/at070006.txt"},{"name":"1017692","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017692"},{"name":"1017694","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1017694"},{"name":"ADV-2007-0702","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0702"},{"name":"20070222 VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"33479","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33479"},{"name":"24249","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24249"},{"name":"verisign-configchk-bo(32639)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32639"},{"name":"VU#308087","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/308087"},{"tags":["x_refsource_MISC"],"url":"http://jvn.jp/cert/JVNVU%23308087/index.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://download.verisign.co.jp/support/announce/20070216.html"},{"name":"20070223 Verisign ConfigChk ActiveX Overflow(s)","tags":["mailing-list","x_refsource_VIM"],"url":"http://attrition.org/pipermail/vim/2007-February/001385.html"},{"name":"1017693","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017693"},{"name":"22676","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22676"},{"name":"22671","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22671"},{"name":"20070222 Verisign ConfigChk ActiveX Overflow(s)","tags":["mailing-list","x_refsource_VIM"],"url":"http://attrition.org/pipermail/vim/2007-February/001384.html"},{"tags":["x_refsource_MISC"],"url":"http://www.jpcert.or.jp/at/2007/at070006.txt"},{"name":"1017692","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017692"},{"name":"1017694","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1017694"},{"name":"ADV-2007-0702","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0702"},{"name":"20070222 VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1083","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33479","refsource":"OSVDB","url":"http://osvdb.org/33479"},{"name":"24249","refsource":"SECUNIA","url":"http://secunia.com/advisories/24249"},{"name":"verisign-configchk-bo(32639)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32639"},{"name":"VU#308087","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/308087"},{"name":"http://jvn.jp/cert/JVNVU%23308087/index.html","refsource":"MISC","url":"http://jvn.jp/cert/JVNVU%23308087/index.html"},{"name":"https://download.verisign.co.jp/support/announce/20070216.html","refsource":"CONFIRM","url":"https://download.verisign.co.jp/support/announce/20070216.html"},{"name":"20070223 Verisign ConfigChk ActiveX Overflow(s)","refsource":"VIM","url":"http://attrition.org/pipermail/vim/2007-February/001385.html"},{"name":"1017693","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017693"},{"name":"22676","refsource":"BID","url":"http://www.securityfocus.com/bid/22676"},{"name":"22671","refsource":"BID","url":"http://www.securityfocus.com/bid/22671"},{"name":"20070222 Verisign ConfigChk ActiveX Overflow(s)","refsource":"VIM","url":"http://attrition.org/pipermail/vim/2007-February/001384.html"},{"name":"http://www.jpcert.or.jp/at/2007/at070006.txt","refsource":"MISC","url":"http://www.jpcert.or.jp/at/2007/at070006.txt"},{"name":"1017692","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017692"},{"name":"1017694","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1017694"},{"name":"ADV-2007-0702","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0702"},{"name":"20070222 VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1083","datePublished":"2007-02-23T00:00:00.000Z","dateReserved":"2007-02-22T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:22.551Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-23 02:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verisign:mpki:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.3","matchCriteriaId":"D4C59422-2D27-46E2-B224-03D839518671"},{"vulnerable":true,"criteria":"cpe:2.3:a:verisign:mpki:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9334BE-2B55-4AEE-B5A3-7FAA3767057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:verisign:mpki:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A5AE7972-3BBC-4247-8524-B90D8980269A"},{"vulnerable":true,"criteria":"cpe:2.3:a:verisign:mpki:6.0:*:*:*:*:*:*:*","matchCriteriaId":"8CD4AA8E-D8A0-48F2-AE50-AB38E6C96699"},{"vulnerable":true,"criteria":"cpe:2.3:a:verisign:mpki:7.0:*:*:*:*:*:*:*","matchCriteriaId":"42581C0F-9F47-4BF3-A95E-EC03871889DF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1083","Ordinal":"1","Title":"CVE-2007-1083","CVE":"CVE-2007-1083","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1083","Ordinal":"1","NoteData":"Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.","Type":"Description","Title":"CVE-2007-1083"},{"CveYear":"2007","CveId":"1083","Ordinal":"2","NoteData":"2007-02-22","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1083","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}