PT-2007-3561 · Microsoft · Msxml+1

Published 2007-08-14 · Updated 2019-02-27 · CVE-2007-2223

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services (MSXML) versions 3.0 through 6.0

Description A remote code execution issue exists, allowing attackers to execute arbitrary code via the substringData method on a TextNode or XMLDOM object, leading to an integer overflow and buffer overflow. This could enable an attacker to make changes to the system with the permissions of the logged-on user. If the user has administrative rights, the attacker could gain complete control of the system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft XML Core Services (MSXML) versions 3.0 through 6.0, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-119

Related Identifiers

CVE-2007-2223

Affected Products

Msxml

Office

References · 15

• 🔥 https://exploit-db.com/exploits/30493 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2223 · Security Note
• http://vupen.com/english/advisories/2007/2866 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-042 · Vendor Advisory
• http://secunia.com/advisories/26447 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2223 · Security Note
• http://securitytracker.com/id?1018559 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-048 · Note
• http://securityfocus.com/archive/1/476527/100/0/threaded · Note
• http://securityfocus.com/bid/25301 · Note
• http://securityfocus.com/archive/1/476747/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2069 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=576 · Note
• http://kb.cert.org/vuls/id/361968 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-042 · Note