CVE-2007-3282: Microsoft Office

High severity, CVSS 7.8. EPSS: 42.2% chance of exploitation in the next 30 days.

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the DeleteRecordSourceIfUnused method.

Affected products

• Microsoft Office: any version
• Microsoft Office Msodatasourcecontrol Activex: any version

Published 2007-06-19. Last modified 2026-06-16.