10

CVE-2007-1512

Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio .Net Version2002 Updategold
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2003 Server Versiongold
   Microsoft ≫ Windows 2003 Server Versionsp1
   Microsoft ≫ Windows Xp Updatesp2
Microsoft ≫ Visual Studio .Net Version2002 Updatesp1
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2003 Server Versiongold
   Microsoft ≫ Windows 2003 Server Versionsp1
   Microsoft ≫ Windows Xp Updatesp2
Microsoft ≫ Visual Studio .Net Version2003 Updategold
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2003 Server Versiongold
   Microsoft ≫ Windows 2003 Server Versionsp1
   Microsoft ≫ Windows Xp Updatesp2
Microsoft ≫ Visual Studio .Net Version2003 Updatesp1
   Microsoft ≫ Windows 2000 Updatesp4
   Microsoft ≫ Windows 2003 Server Versiongold
   Microsoft ≫ Windows 2003 Server Versionsp1
   Microsoft ≫ Windows Xp Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 23.32% 0.958
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C