CVE-2007-0065

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Feb 12, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-00667.1The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attacCVE-2007-00677.8Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a CVE-2007-00689.3IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows CVE-2007-00699.3Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of serCVE-2007-00719.3Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code viCVE-2007-007210.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-007310.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-007410.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-00757.5AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00767.5Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dataCVE-2007-00775.0lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00785.0BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat
CVE-2007-0065: Critical severity, CVSS 10.0 | Vulnix