Unscored severity · published Mar 8, 2007
CVE-2007-1347
Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption…
–
CVSS
31.2%
EPSS
No
On KEV
Description
Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
Exploitation
Is it being used?
Exploit prediction (EPSS)31.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Windows Explorer · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1347
lostmon.blogspot.com
http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html
osvdb.org
http://osvdb.org/36141
Third Party Advisory
http://www.kb.cert.org/vuls/id/194944
www.securityfocus.com
http://www.securityfocus.com/bid/22847
www.securitytracker.com
http://www.securitytracker.com/id?1017736
www.exploit-db.com
https://www.exploit-db.com/exploits/3419
More from Windows Explorer
–
CVE-2007-1090
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash…
–
CVE-2007-0562
Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .avi…
–
CVE-2006-6602
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a crafted WMV file
–
CVE-2005-2117
Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote…
–
CVE-2005-0954
Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file