CVE ID:	CVE-2007-0041
Description:	The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0041 BugTraq ID: 24778 http://www.securityfocus.com/bid/24778 Cert/CC Advisory: TA07-191A http://www.us-cert.gov/cas/techalerts/TA07-191A.html HPdes Security Advisory: SSRT071446 http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html Microsoft Security Bulletin: MS07-040 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 http://osvdb.org/35954 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093 http://www.securitytracker.com/id?1018356 http://secunia.com/advisories/26003 http://www.vupen.com/english/advisories/2007/2482 XForce ISS Database: ms-dotnet-pe-loader-bo(34637) https://exchange.xforce.ibmcloud.com/vulnerabilities/34637