Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-0025
HistoryFeb 13, 2007 - 8:28 p.m.

CVE-2007-0025

2007-02-1320:28:00
CWE-94
[email protected]
web.nvd.nist.gov
20
microsoft
windows
visual studio
vulnerability
mfc component
arbitrary code execution
rtf file
memory corruption
cve-2007-0025

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.672 Medium

EPSS

Percentile

97.9%

JSON

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.

Related

cert 1
nessus 1
prion 2
securityvulns 2
cve 1
checkpoint_advisories 1
cert
cert
Microsoft MFC component vulnerable to remote code execution via malformed embedded OLE object
2007-02-14 00:00:00
nessus
nessus
MS07-012: Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)
2007-02-13 00:00:00
prion
prion
Stack overflow
2007-02-13 20:28:00
Stack overflow
2007-03-20 10:19:00
securityvulns
securityvulns
Microsoft Security Bulletin MS07-012 Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)
2007-02-13 00:00:00
Microsoft MFC memory corruption
2007-03-16 00:00:00
cve
cve
CVE-2007-1512
2007-03-20 10:19:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Malformed RTF Handling Code Execution (MS07-011; CVE-2006-1311; CVE-2007-0025; CVE-2007-0026)
2007-02-25 00:00:00

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.672 Medium

EPSS

Percentile

97.9%

JSON
Related for CVE-2007-0025
cert1nessus1prion2securityvulns2cve1checkpoint_advisories1