CVE-2007-6026 Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary cod...
HighCVSS 9.3
EPSS 28.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft jet | = 4.0.8618.0 | No fix listed |
| Microsoft office | = 2003-sp3 | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- dvlabs.tippingpoint.com
- 20071116 Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability mailing-list
- SSRT080071 vendor-advisory
- ruder.cdut.net
- 3376 third-party-advisory
- VU#936529 third-party-advisory us-government-resource
- 20071116 Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability mailing-list
- 20071116 Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability mailing-list
- 20071117 Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability mailing-list
- 20071118 Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability mailing-list
- 20080513 TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability mailing-list
- 26468 vdb-entry
- 28398 vdb-entry
- 1018976 vdb-entry
- TA08-134A third-party-advisory us-government-resource
- MS08-028 vendor-advisory
- microsoft-jet-engine-mdb-bo(38499) vdb-entry
- oval:org.mitre.oval:def:5578 signature vdb-entry