CVE-2007-3491

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-29 · updated 2026-06-16

Description

Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP message.

Affected products

Progress Software Corporation OpenEdge: 9.1e, 10.1a, 10.1b

References

http://osvdb.org/37747
http://secunia.com/advisories/25865
http://securityreason.com/securityalert/2851
http://www.psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf
http://www.securityfocus.com/archive/1/472349/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/35104
http://osvdb.org/37747
http://secunia.com/advisories/25865
http://securityreason.com/securityalert/2851
http://www.psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf
http://www.securityfocus.com/archive/1/472349/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/35104

Get alerted when CVE-2007-3491 or the next vulnerability affects your stack