Unscored severity · published May 8, 2007
CVE-2007-0940
Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2…
–
CVSS
75.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)75.7% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Biztalk Server · Microsoft
2004; 2004 · source: NVD
CA
Capicom · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0940
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0940
secunia.com
http://secunia.com/advisories/25185
US Government Resource
http://www.kb.cert.org/vuls/id/866305
www.osvdb.org
http://www.osvdb.org/34397
www.securityfocus.com
http://www.securityfocus.com/archive/1/468871/100/200/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23782
www.securitytracker.com
http://www.securitytracker.com/id?1018016
More from Biztalk Server
8.8
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
–
CVE-2015-2475
Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and BizTalk Server 2010, 2013 Gold, and…
–
CVE-2009-2496
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3,…
–
CVE-2007-1201
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to…
–
CVE-2003-0118
SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system…