CVE-2007-2903: Microsoft Office

Medium severity, CVSS 5.0. EPSS: 28.5% chance of exploitation in the next 30 days.

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

• Microsoft Office: version 2000 only

Published 2007-05-30. Last modified 2026-06-16.