CVE-2007-6026

N/A Unknown
Published: November 20, 2007 Modified: April 23, 2026
View on NVD

Description

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://dvlabs.tippingpoint.com/advisory/TPTI-08-04
Source: cve@mitre.org
http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058531.html
Source: cve@mitre.org
http://marc.info/?l=bugtraq&m=121129490723574&w=2
Source: cve@mitre.org
http://ruder.cdut.net/blogview.asp?logID=227
Source: cve@mitre.org
http://securityreason.com/securityalert/3376
Source: cve@mitre.org
http://www.kb.cert.org/vuls/id/936529
Source: cve@mitre.org
US Government Resource
http://www.securityfocus.com/archive/1/483797/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/483858/100/100/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/483887/100/100/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/483888/100/100/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/492019/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/26468
Source: cve@mitre.org
http://www.securityfocus.com/bid/28398
Source: cve@mitre.org
http://www.securitytracker.com/id?1018976
Source: cve@mitre.org
http://www.us-cert.gov/cas/techalerts/TA08-134A.html
Source: cve@mitre.org
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/38499
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5578
Source: cve@mitre.org
http://dvlabs.tippingpoint.com/advisory/TPTI-08-04
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058531.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=121129490723574&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://ruder.cdut.net/blogview.asp?logID=227
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/3376
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/936529
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.securityfocus.com/archive/1/483797/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/483858/100/100/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/483887/100/100/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/483888/100/100/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/492019/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/26468
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/28398
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1018976
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA08-134A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/38499
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5578
Source: af854a3a-2127-422b-91ae-364da2661108

36 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
28.3%
98th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-119

Affected Vendors

microsoft

Related CVEs

CVE-2026-9699 6.8
CVE-2026-57667 8.5
CVE-2026-57665 5.3
CVE-2026-57664 4.3
CVE-2026-57663 8.5