Description
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.
References
- ADV-2007-0582 vdb-entry
- 31886 vdb-entry
- 1017640 vdb-entry
- VU#368132 third-party-advisory
- 1017641 vdb-entry
- 21876 vdb-entry
- TA07-044A third-party-advisory
- MS07-013 vendor-advisory
- ms-richedit-code-execution(30592) vdb-entry
- 24152 third-party-advisory
- oval:org.mitre.oval:def:1090 vdb-entry signature