← Database

CVE-2007-2223

CRITICAL CVSS: 9.3 Published: 2007-08-14 Modified: 2026-06-16

Description

Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.

Affected Platforms

Microsoft Word ViewerMicrosoft Office Sharepoint ServerMicrosoft Windows XpMicrosoft Windows Server 2003Microsoft Windows Server 2008Microsoft Office Groove ServerMicrosoft OfficeMicrosoft Office Compatibility PackMicrosoft Windows VistaMicrosoft Xml Core Services

Weakness Type

CWE-119, CWE-190

References