critical9.3Public exploit code

CVE-2007-6026

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-as…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Microsoft Jet Engine - '.MDB' File Parsing Stack Overflow2007-11-16 · local · windows · Verified

Impact

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.

Affected products

Vendor	Product	Affected versions
Microsoft	Jet	Version 4.0.8618.0
Microsoft	Office	Version 2003
Microsoft	Windows 2000	All versions
Microsoft	Windows 2003 Server	All versions
Microsoft	Windows Nt	Version 4.0
Microsoft	Windows Xp	All versions

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References