Microsoft Jet vulnerabilities

7 CVEs affecting Microsoft Jet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1200, published 2008-03-06.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0944, published 2005-05-02. High severity, CVSS 7.5. EPSS: 34% chance of exploitation in the next 30 days. Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.
• CVE-2007-6026, published 2007-11-20. High severity, CVSS 9.3. EPSS: 28.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary…
• CVE-2004-0197, published 2004-06-01. High severity, CVSS 7.5. EPSS: 26.3% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.
• CVE-2002-0859, published 2002-09-05. High severity, CVSS 7.5. EPSS: 26.2% chance of exploitation in the next 30 days. Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
• CVE-2008-1200, published 2008-03-06. High severity, CVSS 9.3. EPSS: 12% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). NOTE: this is…
• CVE-2000-0323, published 1999-07-28. High severity, CVSS 7.6. EPSS: 5.5% chance of exploitation in the next 30 days. The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
• CVE-2000-0325, published 1999-08-20. High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days. The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.