CVE-2007-0025

no score yetEPSS 37%

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.

EPSS: 37% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-02-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:visual_studio_.net
microsoft:windows_2003_server

References

http://secunia.com/advisories/24150
http://www.kb.cert.org/vuls/id/932041
http://www.osvdb.org/31887
http://www.securityfocus.com/bid/22476
http://www.securitytracker.com/id?1017638

Check your stack JSON