← back
CVE-2007-6026

CVE-2007-6026

EPSS 28.3%
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/4625unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://dvlabs.tippingpoint.com/advisory/TPTI-08-04http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058531.htmlhttp://marc.info/?l=bugtraq&m=121129490723574&w=2http://ruder.cdut.net/blogview.asp?logID=227https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028http://securityreason.com/securityalert/3376https://exchange.xforce.ibmcloud.com/vulnerabilities/38499https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5578http://www.kb.cert.org/vuls/id/936529http://www.securityfocus.com/archive/1/483797/100/0/threadedhttp://www.securityfocus.com/archive/1/483858/100/100/threadedhttp://www.securityfocus.com/archive/1/483887/100/100/threaded