CVE-2007-1347 in the critical feed json
Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to caus…
published 2007-03-08 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-1344
- cvss
- 7.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 31.2%
- EPSS 31.2% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Exploit-DB
Summary
Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.
Timeline
- First public exploit (EDB-3419)
- Published
Exploit prediction
31.18% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-3419 Microsoft Windows - '.doc' Malformed Pointers Denial of Service dos, 2007-03-06
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
exploit-db.com
/exploits/3419
exploit
- lostmon.blogspot.com /2007/08/windows-extended-file-attributes-buffer.html
-
osvdb.org
/36141
vdb-entry
-
securityfocus.com
/bid/22847
vdb-entry
-
securitytracker.com
/id?1017736
vdb-entry
-
kb.cert.org
/vuls/id/194944
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2007-1347
- NVD CVE-2007-1347
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.