CVE-2007-3039
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows...
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
- Record
CVE-2007-3039- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
- Record
CVE-2007-3039- Updated
- 2026-11-02
EUVDEUVD-2007-3031 No score
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
- Record
EUVD-2007-3031- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-97c5-v5qw-8wg6 No score
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows...
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.
- Record
GHSA-97c5-v5qw-8wg6- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Message Queueing Service - DNS Name Path Overflow (MS07-065) (Metasploit) | 2010-07-25 |
| Exploit-DB | Microsoft Windows Message Queuing Service - RPC Buffer Overflow (MS07-065) (1) | 2007-12-18 |
| Exploit-DB | Microsoft Windows Server 2000 SP4 (Advanced Server) - Message Queue (MS07-065) | 2007-12-21 |
| Exploit-DB | Microsoft Windows Message Queuing Service - RPC Buffer Overflow (MS07-065) (2) | 2008-01-18 |
| Metasploit | MS07-065 Microsoft Message Queueing Service DNS Name Path Overflow | 2007-12-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3039 is a high vulnerability (CVSS 9.0) in Microsoft Message Queuing, published December 12, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 69.1%, the 99th percentile. No source names a fixed version.
References
exploit-db.com/exploits/4934
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4474
securityfocus.com/archive/1/485268/100/0/threaded
securitytracker.com/id?1019077
Show 10 moreShow less
secunia.com/advisories/28011
zerodayinitiative.com/advisories/ZDI-07-076.html
us-cert.gov/cas/techalerts/TA07-345A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-065
vupen.com/english/advisories/2007/4181
nvd.nist.gov/vuln/detail/CVE-2007-3039
github.com/advisories/GHSA-97c5-v5qw-8wg6