← Database

CVE-2007-6026

CRITICAL CVSS: 9.3 Published: 2007-11-20 Modified: 2026-06-16

Description

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.

Affected Platforms

Microsoft JetMicrosoft Windows NtMicrosoft Windows XpMicrosoft Windows 2000Microsoft OfficeMicrosoft Windows 2003 Server

Weakness Type

CWE-119

References