CVE-2007-1201: Code Injection

Published Mar 11, 2008

Updated

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."

Affected Software

8 affected components

Microsoft BizTalk Server=2000

Microsoft BizTalk Server=2002

Microsoft Commerce Server=2000

Microsoft Internet Security And Acceleration Server=2000-sp2

Microsoft Office=2000-sp3

Microsoft Office=xp-sp3

Microsoft Visual Studio .NET=2002-sp1

Microsoft Visual Studio .NET=2003-sp1

Remediation

Patch Available

http://www.securityfocus.com/bid/28136

Event History

Mar 11, 2008

CVE Published

11:44 PM

Mar 12, 2008

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1201?

CVE-2007-1201 is considered to have a high severity due to its potential for remote code execution.

How do I fix CVE-2007-1201?

To fix CVE-2007-1201, apply the latest security updates released by Microsoft for the affected software.

Which software is affected by CVE-2007-1201?

CVE-2007-1201 affects several Microsoft products including Office XP, Visual Studio .NET 2002 and 2003, and BizTalk Server.

Can CVE-2007-1201 be exploited remotely?

Yes, CVE-2007-1201 can be exploited remotely, requiring user interaction for successful execution.

What type of vulnerability is CVE-2007-1201?

CVE-2007-1201 is an unspecified vulnerability related to memory corruption in certain COM objects.