Every CVE Search/ Get API key

CVE-2007-0084

** DISPUTED ** Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft...

6.6 MediumDisputed

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed

Exploit likelihood

1.36%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.6

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed

Record
CVE-2007-0084
CVSS 2.0
6.6 MediumAV:L/AC:M/Au:S/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed

Record
CVE-2007-0084
Updated
2026-11-02
EUVDEUVD-2007-0088 No score

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed

Record
EUVD-2007-0088
Updated
2026-11-03
GitHub AdvisoriesGHSA-5v4j-2xcw-cv26 No score

** DISPUTED ** Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft...

** DISPUTED ** Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed.

Record
GHSA-5v4j-2xcw-cv26
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0084 is a medium vulnerability (CVSS 6.6) in Microsoft Message Compiler, published January 5, 2007. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 71st percentile.

References

MoveEnter Open