CVE-2007-3678 Stack-based buffer overflow in the MSWord text-import extension (Word 6-2000 Filter.xnt) in QuarkXPress 7.2 for Windows, when using the Rectangle Text Box tool for importing text, allows user-assisted...
HighCVSS 7.6
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the MSWord text-import extension (Word 6-2000 Filter.xnt) in QuarkXPress 7.2 for Windows, when using the Rectangle Text Box tool for importing text, allows user-assisted remote attackers to execute arbitrary code via a long font name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| quarkxpress | = 7.2 | No fix listed |
References
- 37890 vdb-entry
- 25994 third-party-advisory vendor-advisory
- vuln.sg exploit
- 24872 vdb-entry
- 1018385 vdb-entry
- ADV-2007-2504 vdb-entry
- quarkxpress-msword-textimportext-bo(35369) vdb-entry