CVE-2007-0938

None

CVSS

—

EPSS

45.6%

Published

Apr 10, 2007

CISA due date

—

The record

Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed