CVE-2007-1083

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-23 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.

Affected products

Verisign Mpki: through 6.1.3; 4.6.1, 5.0, 6.0, 7.0

References

http://attrition.org/pipermail/vim/2007-February/001384.html
http://attrition.org/pipermail/vim/2007-February/001385.html
http://jvn.jp/cert/JVNVU%23308087/index.html
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
http://osvdb.org/33479
http://secunia.com/advisories/24249
http://www.jpcert.or.jp/at/2007/at070006.txt
http://www.kb.cert.org/vuls/id/308087
http://www.securityfocus.com/bid/22671
http://www.securityfocus.com/bid/22676
http://www.securitytracker.com/id?1017692
http://www.securitytracker.com/id?1017693

Get alerted when CVE-2007-1083 or the next vulnerability affects your stack