CVE-2007-0025
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-0025
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows MFC组件OLE对象缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Microsoft Windows 2000 SP4，XP SP2，2003 SP1版本，Visual Studio .NET 2000，2002 SP1，2003以及2003 SP1版本中的MFC组件中存在缓冲区溢出漏洞。用户辅助的远程攻击者可借助带有畸形OLE对象的RTF文件执行任意代码，该对象可触发内存破坏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-0025
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-0025
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-0025 (8)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-012vendor-advisoryx_refsource_MS
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A157vdb-entrysignaturex_refsource_OVAL
Same Patch Batch · n/a · 2007-02-13 · 29 CVEs total
| CVE-2006-3448 | Microsoft Windows分步交互式训练缓冲区溢出漏洞 | |
| CVE-2007-0895 | Solaris 竞争条件权限管理和访问控制漏洞 | |
| CVE-2007-0896 | Firefox多个跨站脚本攻击漏洞 | |
| CVE-2007-0842 | Microsoft Visual C++标准库时间函数拒绝服务漏洞 | |
| CVE-2007-0904 | LightRO CMS 'projects.php'SQL注入漏洞 | |
| CVE-2007-0903 | EJabberD Mod_Roster_ODBC 未明漏洞 | |
| CVE-2007-0902 | MoinMoin "展示调试信息"特征未明信息泄露漏洞 | |
| CVE-2007-0901 | MoinMoin Info页多个跨站脚本攻击漏洞 | |
| CVE-2007-0900 | TagIt! Tagboard 多个PHP远程文件包含漏洞 | |
| CVE-2007-0214 | Microsoft HTML帮助ActiveX控件远程代码执行漏洞(MS07-008) | |
| CVE-2007-0211 | Microsoft Windows Shell硬件检测服务权限提升漏洞(MS07-006) | |
| CVE-2007-0210 | Microsoft Windows图像捕获服务本地权限提升漏洞(MS07-007) | |
| CVE-2007-0026 | Microsoft Windows OLE Dialog内存破坏漏洞(MS07-011) | |
| CVE-2006-5270 | Microsoft恶意软件保护引擎整数溢出漏洞(MS07-010) | |
| CVE-2007-0219 | Microsoft Internet Explorer 安全漏洞 | |
| CVE-2006-1311 | Microsoft Office和Windows RichEdit组件内存破坏漏洞(MS07-013) | |
| CVE-2007-0209 | Microsoft Word畸形绘图对象任意代码执行漏洞(MS07-014) | |
| CVE-2007-0208 | Microsoft Word宏权限绕过任意代码执行漏洞(MS07-014) | |
| CVE-2007-0217 | Microsoft Internet Explorer 安全漏洞 | |
| CVE-2006-4697 | Microsoft Internet Explorer 安全漏洞 |
Showing top 20 of 29 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-0025
No comments yet