CVE-2007-1204 Memory corruption in n/a
Remote attackers on the same subnet can execute arbitrary code via crafted HTTP headers in the Windows UPnP service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-1204?
CVE-2007-1204 is a medium-severity memory corruption vulnerability in Microsoft Windows Xp, published on 10 Apr 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption.
Weakness: CWE-119
Which versions are affected by CVE-2007-1204?
It affects 1 product.
Products include Microsoft Windows Xp.
How do I fix CVE-2007-1204?
No fix has been published for CVE-2007-1204 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-1204 being exploited?
There is no known exploitation of CVE-2007-1204 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows Xp
Sources
Also known as GHSA-w2qj-h768-f5c9.