CVE-2007-0026: Microsoft Windows 2000

High severity, CVSS 7.6. EPSS: 24.8% chance of exploitation in the next 30 days.

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version sp1 only
• Microsoft Windows XP: any version

Published 2007-02-13. Last modified 2026-06-16.