PT-2007-2902 · Microsoft · Mfc+2

Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1512

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the patch for the issue Visual Studio .NET versions prior to the patch for the issue

Description The issue is a stack-based buffer overflow in the MFC component, specifically in the AfxOleSetEditMenu function. This allows user-assisted remote attackers to potentially crash the system via an RTF file with a malformed OLE object. The attack results in writing two 0x00 characters past the end of szBuffer.

Recommendations For Microsoft Windows, apply the patch that fixes the issue. For Visual Studio .NET, apply the patch that fixes the issue. As a temporary workaround, consider avoiding the use of RTF files with malformed OLE objects until a patch is available.

Correção

Identificadores relacionados

CVE-2007-1512

Produtos afetados

Mfc

Windows

Visual Studio .Net

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2007-1512 · Nota de Segurança
• http://securityfocus.com/archive/1/463009/100/0/threaded · Nota