CVE-2007-2223

NGHIÊM TRỌNG 9.3CVE-2007-2223 · Công bố 14/08/2007 · cập nhật 16/06/2026

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
xml core services microsoft	`= 3.0= 4.0= 5.0= 6.0`	Chưa có bản vá

Mô tả

Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.

Tham khảo

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
secunia.com/advisories/26447 · Vendor Advisory
kb.cert.org/vuls/id/361968 · Third Party Advisory
securityfocus.com/archive/1/476527/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/476747/100/0/threaded · Third Party Advisory
securityfocus.com/bid/25301 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2007/2866 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-07-048 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-042 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2069 · Third Party Advisory

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí