← Vulnerability feed

Vulnerability record · CVE-2007-1347 · published 8 March 2007

CVE-2007-1347: Microsoft windows explorer memory buffer overflow vulnerability

Microsoft · Windows Explorer

Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.

7.1 CVSS 2.0 High EPSS 30% · top 1.8% CWE-119 · Memory buffer overflow
7.1CVSS 2.0 base score
30%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which causes an error in Ole32.dll.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html
http://osvdb.org/36141
http://www.kb.cert.org/vuls/id/194944 Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/22847
http://www.securitytracker.com/id?1017736
https://www.exploit-db.com/exploits/3419
http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html
http://osvdb.org/36141
http://www.kb.cert.org/vuls/id/194944 Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/22847
http://www.securitytracker.com/id?1017736
https://www.exploit-db.com/exploits/3419

Track CVE-2007-1347 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-1999-0967Microsoft internet explorer vulnerabilityBuffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.EPSS 6.9%7.1CVE-2007-1090Microsoft windows explorer vulnerabilityMicrosoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file…EPSS 17%5.1CVE-2005-2117Microsoft windows explorer vulnerabilityWeb View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in previ…EPSS 37%5.0CVE-2005-0954Microsoft internet explorer vulnerabilityWindows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Win…EPSS 15%4.3CVE-2007-0562Microsoft windows explorer vulnerabilityWindows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (applica…EPSS 14%4.3CVE-2006-6602Microsoft windows explorer vulnerabilityexplorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a …EPSS 15%9.5CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F…KEV8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed

Source: NIST National Vulnerability Database (record CVE-2007-1347), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.