CVE-2007-0034 Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Search...
HighCVSS 9.3
EPSS 37.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft outlook | = 2000 | No fix listed |
| Microsoft outlook | = 2002 | No fix listed |
| Microsoft outlook | = 2003 | No fix listed |
References
- 23674 third-party-advisory vendor-advisory
- 1017488 vdb-entry
- www.computerterrorism.com
- VU#271860 third-party-advisory us-government-resource
- 31254 vdb-entry
- 20070111 Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability mailing-list
- HPSBST02184 vendor-advisory
- 21936 vdb-entry
- TA07-009A third-party-advisory us-government-resource
- ADV-2007-0104 vdb-entry vendor-advisory
- MS07-003 vendor-advisory
- oval:org.mitre.oval:def:153 signature vdb-entry