CVE-2007-2223

No fix known EPSS 49%

Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.

Published 2007-08-14 · CVE record · OSV

Products: microsoft xml_core_services