CVE-2007-1201
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 28.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 28.73% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- microsoft/biztalk server · microsoft/commerce server · microsoft/internet security and acceleration server · microsoft/office · microsoft/visual studio .net
- Source
- secure@microsoft.com
References
- http://marc.info/?l=bugtraq&m=120585858807305&w=2
- http://secunia.com/advisories/29328Vendor Advisory
- http://www.securityfocus.com/bid/28136Patch
- http://www.securitytracker.com/id?1019581
- http://www.us-cert.gov/cas/techalerts/TA08-071A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/0849/references
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-017
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5327
- http://marc.info/?l=bugtraq&m=120585858807305&w=2
- http://secunia.com/advisories/29328Vendor Advisory
- http://www.securityfocus.com/bid/28136Patch
- http://www.securitytracker.com/id?1019581
- http://www.us-cert.gov/cas/techalerts/TA08-071A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/0849/references
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-017
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5327
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.