CVE-2007-1201 Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger....
HighCVSS 9.3
EPSS 28.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft biztalk server | = 2000 | No fix listed |
| Microsoft biztalk server | = 2002 | No fix listed |
| Microsoft commerce server | = 2000 | No fix listed |
| Microsoft internet security and acceleration server | = 2000-sp2 | No fix listed |
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft visual studio .net | = 2002-sp1 | No fix listed |
| Microsoft visual studio .net | = 2003-sp1 | No fix listed |
References
- SSRT080028 vendor-advisory
- 29328 third-party-advisory vendor-advisory
- 28136 patch vdb-entry
- 1019581 vdb-entry
- TA08-071A third-party-advisory us-government-resource
- ADV-2008-0849 vdb-entry
- MS08-017 vendor-advisory
- oval:org.mitre.oval:def:5327 signature vdb-entry