CVE-2007-6357
Severity Score
5.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
Desbordamiento de búfer basado en pila en Microsoft Office Access permite a atacantes remotos con la intervención del usuario ejecutar código de su elección a través de archivos Microsoft Access Database (.mdb) manipulados. NOTA: Debido a la falta de detalles como en 20071210, no está claro si esta cuestión es la misma que la CVE-2007-6026 o CVE-2005-0944.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-12-14 CVE Reserved
- 2007-12-15 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/44150 | Vdb Entry | |
| http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9052538&source=rss_topic17 | X_refsource_misc | |
| http://www.informationweek.com/shared/printableArticle.jhtml?articleID=204802012 | X_refsource_misc | |
| http://www.us-cert.gov/current/index.html#microsoft_access_database_file_attachment | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|