CVE-2007-2224
high · 9.3Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.
9.3
CVSS
34.5%
EPSS (exploit prob.)
98th
EPSS percentile
2007-08-14
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119CWE-189
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_xp | all versions |
| microsoft | office | 2004 |
| microsoft | visual_basic | 6.0 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/26449
- http://www.securityfocus.com/archive/1/476527/100/0/threaded
- http://www.securityfocus.com/bid/25282
- http://www.securitytracker.com/id?1018560
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html
- http://www.vupen.com/english/advisories/2007/2867
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-043
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1248
- http://secunia.com/advisories/26449
- http://www.securityfocus.com/archive/1/476527/100/0/threaded
- http://www.securityfocus.com/bid/25282
- http://www.securitytracker.com/id?1018560
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html
- http://www.vupen.com/english/advisories/2007/2867
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-043
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1248
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-2224