CVE-2007-6026

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

28.27% chance of exploitation in the next 30 days, 98th percentile

Published

2007-11-20

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4625

Security advisories

• http://www.kb.cert.org/vuls/id/936529
• http://www.securityfocus.com/bid/26468
• http://www.securityfocus.com/bid/28398
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028

References

• CVE Record
• NVD entry