VULNERABILITY INTELLIGENCE
CVE-2007-2137
CVSS score10 HIGH
EPSS probability7.74%
CISA KEVNot currently listed
Published2007-04-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain TCP port.