CVE-2007-1083
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2...
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
Exploit likelihood
What each source reports
NVD Score used
9.3
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
- Record
CVE-2007-1083- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
- Record
CVE-2007-1083- Updated
- 2026-11-02
EUVDEUVD-2007-1080 No score
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
- Record
EUVD-2007-1080- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p548-63vv-pg95 No score
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2...
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method.
- Record
GHSA-p548-63vv-pg95- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1083 is a high vulnerability (CVSS 9.3) in Verisign Mpki, published February 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.29%, the 94th percentile. No source names a fixed version.
References
osvdb.org/33479
secunia.com/advisories/24249
exchange.xforce.ibmcloud.com/vulnerabilities/32639
kb.cert.org/vuls/id/308087
jvn.jp/cert/JVNVU%23308087/index.html
download.verisign.co.jp/support/announce/20070216.html
Show 12 moreShow less
attrition.org/pipermail/vim/2007-February/001385.html
securitytracker.com/id?1017693
securityfocus.com/bid/22676
securityfocus.com/bid/22671
attrition.org/pipermail/vim/2007-February/001384.html
jpcert.or.jp/at/2007/at070006.txt
securitytracker.com/id?1017692
securitytracker.com/id?1017694
vupen.com/english/advisories/2007/0702
labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
nvd.nist.gov/vuln/detail/CVE-2007-1083
github.com/advisories/GHSA-p548-63vv-pg95