CVE-2007-2903 Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probab...
MediumCVSS 5.0
EPSS 28.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000 | No fix listed |
References
- moaxb.blogspot.com exploit
- 36034 vdb-entry
- shinnai.altervista.org
- 24118 vdb-entry
- 1018107 vdb-entry
- www.shinnai.altervista.org exploit
- office-ouactrl-bo(34473) vdb-entry