CVE-2007-6026
- State
- Published
- Severity
- Not scored
- Published
- Nov 20, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 19, 2007
Description
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-04
- VU#936529third-party-advisory
- 20071116 Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerabilitymailing-list
- 20071118 Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerabilitymailing-list
- MS08-028vendor-advisory
- 3376third-party-advisory
- oval:org.mitre.oval:def:5578vdb-entrysignature
- 20080513 TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerabilitymailing-list
- 28398vdb-entry
- SSRT080071vendor-advisory
- 20071116 Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerabilitymailing-list
- 26468vdb-entry
- 20071117 Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerabilitymailing-list
- TA08-134Athird-party-advisory
- http://ruder.cdut.net/blogview.asp?logID=227
- 1018976vdb-entry
- microsoft-jet-engine-mdb-bo(38499)vdb-entry
- 20071116 Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.