CVE-2007-3282 – Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

https://notcve.org/view.php?id=CVE-2007-3282

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the DeleteRecordSourceIfUnused method. Desbordamiento de búfer en el control ActiveX MSODataSourceControl de Microsoft Office permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un argumento largo para el método DeleteRecordSourceIfUnused. • https://www.exploit-db.com/exploits/4067 http://osvdb.org/38471 http://www.securitytracker.com/id?1018251 https://exchange.xforce.ibmcloud.com/vulnerabilities/34849 •