CVE-2007-0034 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Office

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
62.9%
top 1.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft OfficeMicrosoft Outlook
Timeline
PublishedJan 9
Latest updateMay 1

Description

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/outlook2000, 2002, 2003+2
▶NVDmicrosoft/office2000, 2003, xp+2

🔴Vulnerability Details

2
GHSA
GHSA-fj73-h7g4-f5wj: Buffer overflow in the Advanced Search (Finder↗2022-05-01
▶
CVEList
CVE-2007-0034: Buffer overflow in the Advanced Search (Finder↗2007-01-09
▶
CVE-2007-0034 — Microsoft Office vulnerability | cvebase