CVE-2007-0065 - Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request

Back Back to CVE browser

HIGH

Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request

Published Feb 12, 2008

10.0

HIGH

CVSS 2.0

EPSS 43.24%

Description

Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (9)

http://marc.info/?l=bugtraq&m=120361015026386&w=2
vendor-advisoryx_refsource_HP
http://secunia.com/advisories/28902
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/27661
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019373
vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA08-043C.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2008/0510/references
vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-0069
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=120361015026386&w=2		vendor-advisoryx_refsource_HP
http://secunia.com/advisories/28902		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/27661		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019373		vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA08-043C.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2008/0510/references		vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-0069		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388		vdb-entrysignaturex_refsource_OVAL