VULNERABILITY INTELLIGENCE

CVE-2007-0026

CVSS score7.6 HIGH
EPSS probability24.81%
CISA KEVNot currently listed
Published2007-02-13
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.

Primary references