Description
The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.
References
- VU#932041 third-party-advisory
- MS07-012 vendor-advisory
- 24150 third-party-advisory
- ADV-2007-0581 vdb-entry
- 1017638 vdb-entry
- 31887 vdb-entry
- TA07-044A third-party-advisory
- 22476 vdb-entry
- oval:org.mitre.oval:def:157 vdb-entry signature