PT-2007-3562 · Microsoft · Windows+2

Published 2007-08-14 · Updated 2018-10-16 · CVE-2007-2224

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, Server 2003 SP1 and SP2 Microsoft Office version 2004 for Mac Microsoft Visual Basic version 6.0

Description A remote code execution issue exists in Object linking and embedding (OLE) Automation. This issue could allow an attacker to execute arbitrary code via the substringData method on a TextNode object, causing an integer overflow that leads to a buffer overflow. An attacker who successfully exploits this issue could make changes to the system with the permissions of the logged-on user. If a user is logged on with administrative user rights, an attacker could take complete control of the affected system, then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows versions 2000 SP4, XP SP2, Server 2003 SP1 and SP2, consider restricting access to the OLE Automation until a patch is available. For Microsoft Office version 2004 for Mac, avoid using the substringData method on a TextNode object in OLE Automation until the issue is resolved. For Microsoft Visual Basic version 6.0, as a temporary workaround, consider disabling the use of OLE Automation in Visual Basic projects until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-189

Related Identifiers

CVE-2007-2224

Affected Products

Office

Visual Basic

Windows

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2224 · Security Note
• http://vupen.com/english/advisories/2007/2867 · Vendor Advisory
• http://secunia.com/advisories/26449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2224 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-043 · Vendor Advisory
• http://securityfocus.com/archive/1/476527/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1248 · Note
• http://securityfocus.com/bid/25282 · Note
• http://securitytracker.com/id?1018560 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-043 · Note
• http://us-cert.gov/cas/techalerts/TA07-226A.html · Note