PT-2007-4203 · Microsoft · Office 2000+1

Published 2007-05-30 · Updated 2017-07-29 · CVE-2007-2903

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) version 1.0.1.9

Description The issue is related to a buffer overflow in the HelpPopup method of the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control. This can be exploited by remote attackers to cause a denial of service, likely resulting in a crash of the winhlp32.exe process, via a long first argument. It is unclear whether this issue can cross privilege boundaries.

Recommendations For Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) version 1.0.1.9, consider disabling the HelpPopup method as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-2903

Affected Products

Office 2000

Office Activex Control

References · 9

• 🔥 http://shinnai.altervista.org/moaxb/20070523/ouactrltxt.html · Exploit
• 🔥 https://exploit-db.com/exploits/3973 · Exploit
• 🔥 http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2903 · Security Note
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=26 · Note
• http://securitytracker.com/id?1018107 · Note
• http://securityfocus.com/bid/24118 · Note
• http://osvdb.org/36034 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34473 · Note