CVE-2007-0065

Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=120361015026386&w=2
http://secunia.com/advisories/28902
http://www.securityfocus.com/bid/27661
http://www.securitytracker.com/id?1019373
http://www.us-cert.gov/cas/techalerts/TA08-043C.html	US Government Resource
http://www.vupen.com/english/advisories/2008/0510/references
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
	cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:sp2:::::::*
	cpe:2.3:o:microsoft:windows_vista::::::::
	cpe:2.3:o:microsoft:windows_xp::sp2::::::*

OR	cpe:2.3:a:microsoft:office:::mac\+os:::::*
	cpe:2.3:a:microsoft:visual_basic:6.0:sp6::::::

History

No history.

Information

Published : 2008-02-12 23:00

Updated : 2023-12-10 10:40

NVD link : CVE-2007-0065

Mitre link : CVE-2007-0065

CVE.ORG link : CVE-2007-0065

JSON object : View

Products Affected

microsoft

windows_2000
windows_2003_server
windows_xp
office
windows_vista
visual_basic

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2007-0065", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-02-12T23:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=120361015026386&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28902", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27661", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019373", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-043C.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0510/references", "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request."}, {"lang": "es", "value": "B\u00fafer overflow basado en mont\u00edculo en el objeto OLE (Object Linking and Embedding)Automation en Windows 2000 SP4, XP SP2, Server 2003 SP1 y SP2, Vista, Office 2004 para Mac, y Visual basic 6.0 SP6, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de una petici\u00f3n de secuencia de comandos manipulada."}], "lastModified": "2018-10-12T21:42:23.983", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "644E2E89-F3E3-4383-B460-424D724EE62F"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "377F7D0C-6B44-4B90-BF90-DAF959880C6D"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9B339C33-8896-4896-88FF-88E74FDBC543"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:office:*:*:mac\\+os:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06A2E44E-E858-4713-9F36-58061E83D438"}, {"criteria": "cpe:2.3:a:microsoft:visual_basic:6.0:sp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F562268C-1B63-4360-BD4C-A7F45009B7D7"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}