Unscored severity · published Feb 12, 2008
CVE-2007-0065
Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual…
–
CVSS
43.2%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.
Exploitation
Is it being used?
Exploit prediction (EPSS)43.2% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
All versions, or not specified · source: NVD
VB
Visual Basic · Microsoft
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0065
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0065
marc.info
http://marc.info/?l=bugtraq&m=120361015026386&w=2
secunia.com
http://secunia.com/advisories/28902
www.securityfocus.com
http://www.securityfocus.com/bid/27661
www.securitytracker.com
http://www.securitytracker.com/id?1019373
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA08-043C.html
www.vupen.com
http://www.vupen.com/english/advisories/2008/0510/references
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability