CVE-2007-2223

緊急 9.3CVE-2007-2223 · 14/08/2007 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
xml core services microsoft	`= 3.0= 4.0= 5.0= 6.0`	修正版なし

概要

Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.

参考情報

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
secunia.com/advisories/26447 · Vendor Advisory
kb.cert.org/vuls/id/361968 · Third Party Advisory
securityfocus.com/archive/1/476527/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/476747/100/0/threaded · Third Party Advisory
securityfocus.com/bid/25301 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2007/2866 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-07-048 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-042 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2069 · Third Party Advisory

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン