Buffer overflow in Microsoft Expression Web
CVE-2007-2223
Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.
Vulnerability class: Buffer Overflow
EPSS: 0.487 (98.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Expression_web
- Microsoft Office — versions 2003, 2007
- Microsoft Office_compatibility_pack — versions 2007
- Microsoft Office_groove_server — versions 2007
- Microsoft Office_sharepoint_server
- Microsoft Windows_server_2003
- Microsoft Windows_server_2008
- Microsoft Windows_vista
- Microsoft Windows_xp
- Microsoft Word_viewer — versions 2003
Weakness classification (CWE)
References
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- secure@microsoft.com (x_refsource_IDEFENSE, Broken Link, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
- secure@microsoft.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (VDB Entry, Third Party Advisory, x_refsource_MISC)