CVE-2007-2903

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

28.51% chance of exploitation in the next 30 days, 98th percentile

Published

2007-05-30

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3973

References

• CVE Record
• NVD entry

Related

• CVE-2007-2902
• CVE-2007-2908
• CVE-2007-2901
• CVE-2007-2916
• CVE-2007-2900
• CVE-2007-2918