NVD

Id
54392  
Name
CVE-2007-2224  
Description
Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2011-03-07  
Seq
2007-2224  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275842 54392 CVE-2007-2224 oval:org.mitre.oval:def:1248  View
275843 54392 CVE-2007-2224 MS07-043  View
275844 54392 CVE-2007-2224 20070814 ZDI-07-048: Microsoft Internet Explorer substringData() Heap Overflow Vulnerability  View
275845 54392 CVE-2007-2224 25282  View
275846 54392 CVE-2007-2224 1018560  View
275847 54392 CVE-2007-2224 TA07-226A  View
275848 54392 CVE-2007-2224 ADV-2007-2867  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51937 JVNDB-2007-000600 Microsoft Windows OLE の substringData のメソッドにおけるバッファオーバーフローの脆弱性 Microsoft Windows の Object linking and embedding (OLE) には TextNode や XMLDOM オブジェクトの substringData のメソッドにおいてバッファオーバーフローの脆弱性が存在します。 CVE-2007-2224 25579 CVE-2007-2224 54392 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000600.html 2007-08-14 2007-08-24 View