CVE-2007-3039

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

• CWE-119

• http://secunia.com/advisories/28011Vendor Advisory
• http://secunia.com/advisories/28051Vendor Advisory
• http://www.securityfocus.com/archive/1/484891/100/0/threaded
• http://www.securityfocus.com/archive/1/485268/100/0/threaded
• http://www.securityfocus.com/bid/26797
• http://www.securitytracker.com/id?1019077
• http://www.us-cert.gov/cas/techalerts/TA07-345A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/4181
• http://www.zerodayinitiative.com/advisories/ZDI-07-076.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474
• https://www.exploit-db.com/exploits/4745
• https://www.exploit-db.com/exploits/4760
• https://www.exploit-db.com/exploits/4934
• http://secunia.com/advisories/28011Vendor Advisory
• http://secunia.com/advisories/28051Vendor Advisory
• http://www.securityfocus.com/archive/1/484891/100/0/threaded
• http://www.securityfocus.com/archive/1/485268/100/0/threaded
• http://www.securityfocus.com/bid/26797
• http://www.securitytracker.com/id?1019077
• http://www.us-cert.gov/cas/techalerts/TA07-345A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/4181
• http://www.zerodayinitiative.com/advisories/ZDI-07-076.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474
• https://www.exploit-db.com/exploits/4745
• https://www.exploit-db.com/exploits/4760
• https://www.exploit-db.com/exploits/4934

Published

Dec 12, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3033Cross-site scripting (XSS) vulnerability in Windows Vista Fe…
• CVE-2007-3034Integer overflow in the AttemptWrite function in Graphics Re…
• CVE-2007-3035Unspecified vulnerability in Microsoft Windows Media Player …
• CVE-2007-3036Unspecified vulnerability in the (1) Windows Services for UN…
• CVE-2007-3037Microsoft Windows Media Player 7.1, 9, 10, and 11 allows rem…
• CVE-2007-3038The Teredo interface in Microsoft Windows Vista and Vista x6…
• CVE-2007-3040Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Mi…
• CVE-2007-3041Unspecified vulnerability in the pdwizard.ocx ActiveX object…
• CVE-2007-3042Cross-site scripting (XSS) vulnerability in Meneame before 2…
• CVE-2007-3043Cross-site scripting (XSS) vulnerability in Collaboration - …
• CVE-2007-3044Unspecified vulnerability in the Map I/O Service (xpwmap) in…
• CVE-2007-3045Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended…