CVE-2007-0043: Microsoft .NET Framework

High severity, CVSS 9.3. EPSS: 30.7% chance of exploitation in the next 30 days.

The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".

Affected products

• Microsoft .NET Framework: version 1.0 only; version 1.1 only; version 2.0 only

Published 2007-07-10. Last modified 2026-06-16.