Vulnerability Report

CVE-2007-3491

Title: Progress Openedge Memory Corruption

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2007-3491.

CWE Category NVD-CWE-noinfo

Published Date Jun 29, 2007

Modified Date Apr 09, 2025

Exploit Status Not Found

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

3.49%

Vulnerability Summary

CVE-2007-3491: Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP message.

Impacted Vendors

progress 1

Reference Links

http://osvdb.org/37747 http://secunia.com/advisories/25865 http://securityreason.com/securityalert/2851 http://www.psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf http://www.securityfocus.com/archive/1/472349/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/35104 http://osvdb.org/37747 http://secunia.com/advisories/25865 http://securityreason.com/securityalert/2851 http://www.psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf http://www.securityfocus.com/archive/1/472349/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/35104

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-3491 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

June 29, 2007 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.