CveMateVulnerability intelligence

CVE-2007-1748: microsoft windows_2003_server

CVSS: 10.0v2.0HighModified

Published 13-04-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1748 is a high (CVSS 10.0) vulnerability in microsoft windows_2003_server. EPSS estimates a 77.66% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 7 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

77.66%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits7exploit-database, metasploit

Timeline

13-04-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

77.66%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 77.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

77.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

7 found

exploit-databaseremotewindowsVerified
Microsoft DNS RPC Service - 'extractQuotedChar()' Remote Overflow 'SMB' (MS07-029) (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft DNS RPC Service - 'extractQuotedChar()' TCP Overflow (MS07-029) (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow
Maturity: weaponized

Show all 7 exploits

exploit-databaseremotewindowsVerified
Microsoft Windows - DNS RPC Remote Buffer Overflow (2)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow
Maturity: weaponized
MetasploitremoteVerified
MS07-029 Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)
exploit/windows/dcerpc/ms07_029_msdns_zonename
Maturity: weaponized
MetasploitremoteUnverified
MS07-029 Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)
exploit/windows/smb/ms07_029_msdns_zonename
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Microsoft1 product

windows_2003_serversp1 | sp2

1 vendor · 1 product

References

15 links

secunia.com/advisories/24871Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/468871/100/200/threadedVendor AdvisoryX Refsource HP
www.securityfocus.com/archive/1/465863/100/100/threadedMailing ListX Refsource BUGTRAQ
www.microsoft.com/technet/security/advisory/935964.mspxX Refsource CONFIRMVendor Advisory
www.us-cert.gov/cas/techalerts/TA07-128A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/bid/23470VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/33629VDB EntryX Refsource XF
blogs.technet.com/msrc/archive/2007/04/12/microsoft-security-advisory-935964-posted.aspxX Refsource MISC
www.securitytracker.com/id?1017910VDB EntryX Refsource SECTRACK
metasploit.com/svn/framework3/trunk/modules/exploits/windows/dcerpc/msdns_zonename.rbX Refsource MISC

Show all 15 references

www.vupen.com/english/advisories/2007/1366VDB EntryX Refsource VUPENVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1228VDB EntrySignatureX Refsource OVAL
www.us-cert.gov/cas/techalerts/TA07-103A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.kb.cert.org/vuls/id/555920Third Party AdvisoryX Refsource CERT VNUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-029Vendor AdvisoryX Refsource MS