10

CVE-2007-1512

Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and Visual Studio .NET 2002 Gold and SP1, and 2003 Gold and SP1 allows user-assisted remote attackers to have an unknown impact (probably crash) via an RTF file with a malformed OLE object, which results in writing two 0x00 characters past the end of szBuffer, aka the "MFC42u.dll Off-by-Two Overflow." NOTE: this issue is due to an incomplete patch (MS07-012) for CVE-2007-0025.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio .Net Version 2002 Update gold
   Microsoft ≫ Windows 2000 Update sp4
   Microsoft ≫ Windows 2003 Server Version gold
   Microsoft ≫ Windows 2003 Server Version sp1
   Microsoft ≫ Windows Xp Update sp2
Microsoft ≫ Visual Studio .Net Version 2002 Update sp1
   Microsoft ≫ Windows 2000 Update sp4
   Microsoft ≫ Windows 2003 Server Version gold
   Microsoft ≫ Windows 2003 Server Version sp1
   Microsoft ≫ Windows Xp Update sp2
Microsoft ≫ Visual Studio .Net Version 2003 Update gold
   Microsoft ≫ Windows 2000 Update sp4
   Microsoft ≫ Windows 2003 Server Version gold
   Microsoft ≫ Windows 2003 Server Version sp1
   Microsoft ≫ Windows Xp Update sp2
Microsoft ≫ Visual Studio .Net Version 2003 Update sp1
   Microsoft ≫ Windows 2000 Update sp4
   Microsoft ≫ Windows 2003 Server Version gold
   Microsoft ≫ Windows 2003 Server Version sp1
   Microsoft ≫ Windows Xp Update sp2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.33% 0.954
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/463009/100/0/threaded