NVD

Id
52261  
Name
CVE-2007-0025  
Description
The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-02-13  
Modified Date
2016-05-09  
Seq
2007-0025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263838 52261 CVE-2007-0025 oval:org.mitre.oval:def:157  View
263839 52261 CVE-2007-0025 VU#932041  View
263840 52261 CVE-2007-0025 MS07-012  View
263841 52261 CVE-2007-0025 22476  View
263842 52261 CVE-2007-0025 1017638  View
263843 52261 CVE-2007-0025 TA07-044A  View
263844 52261 CVE-2007-0025 ADV-2007-0581  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51489 JVNDB-2007-000151 Microsoft Windows および Visual Studio .NET の MFC コンポーネントにおけるメモリ破壊の脆弱性 Microsoft Windows および Microsoft Visual Studio .NET の MFC コンポーネントには、リッチ テキスト形式 (RTF) ファイルに含まれる不正な形式の OLE オブジェクトを処理した際にメモリ領域が破壊される脆弱性が存在します。 CVE-2007-0025 23380 CVE-2007-0025 52261 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000151.html 2007-02-13 2007-04-01 View