PT-2007-4203 · Microsoft · Office 2000+1

Publicado 2007-05-30 · Atualizado 2017-07-29 · CVE-2007-2903

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) version 1.0.1.9

Description The issue is related to a buffer overflow in the HelpPopup method of the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control. This can be exploited by remote attackers to cause a denial of service, likely resulting in a crash of the winhlp32.exe process, via a long first argument. It is unclear whether this issue can cross privilege boundaries.

Recommendations For Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) version 1.0.1.9, consider disabling the HelpPopup method as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-2903

Produtos afetados

Office 2000

Office Activex Control

Referências · 9

• 🔥 http://shinnai.altervista.org/moaxb/20070523/ouactrltxt.html · Exploit
• 🔥 https://exploit-db.com/exploits/3973 · Exploit
• 🔥 http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html · Exploit
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=26 · Nota
• http://securitytracker.com/id?1018107 · Nota
• http://securityfocus.com/bid/24118 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2903 · Nota de Segurança
• http://osvdb.org/36034 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34473 · Nota