CVE-2007-6026: Microsoft Jet

High severity, CVSS 9.3. EPSS: 28.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.

Affected products

• Microsoft Jet: version 4.0.8618.0 only
• Microsoft Office: version 2003 only
• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2007-11-20. Last modified 2026-06-16.