Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 13/02/2007 Updated: 12/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote malicious users to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft visual studio .net 2000
microsoft visual studio .net 2003
microsoft windows 2003 server 2000
microsoft windows 2003 server 2003
microsoft windows 2003 server xp_sp2

CWE-94 http://www.kb.cert.org/vuls/id/932041 http://www.securityfocus.com/bid/22476 http://www.osvdb.org/31887 http://www.securitytracker.com/id?1017638 http://secunia.com/advisories/24150 http://www.us-cert.gov/cas/techalerts/TA07-044A.html http://www.vupen.com/english/advisories/2007/0581 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A157 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-012 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/932041

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0025

Vulnerability Summary

References

Vulmon Search

About

Products

Connect