CVE-2007-2903

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote Denial of Service2007-05-23 · dos · windows · Verified

Impact

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

References

• NVD record
• CVE.org record
• http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html
• http://osvdb.org/36034
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=26
• http://www.securityfocus.com/bid/24118
• http://www.securitytracker.com/id?1018107
• http://www.shinnai.altervista.org/moaxb/20070523/ouactrltxt.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34473
• http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html
• http://osvdb.org/36034
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=26
• http://www.securityfocus.com/bid/24118
• http://www.securitytracker.com/id?1018107
• http://www.shinnai.altervista.org/moaxb/20070523/ouactrltxt.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34473