CVE-2007-2417: Progress Openedge

High severity, CVSS 10.0. EPSS: 16.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491.

Affected products

• Progress Openedge: version 10.1a only; version 10.1b only
• Progress Progress: version 9.1e only
• Rsa Ace Server: version 5.2 only

Published 2007-07-15. Last modified 2026-06-16.