Microsoft Jet vulnerabilities

7 vulnerabilities

Known vulnerabilities in Microsoft Jet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2007-6026microsoftjet+2
EPSS score
28.27%
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
7.5CVE-2005-0944microsoftjet
EPSS score
34.02%
Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.
9.3CVE-2008-1200microsoftaccess+1
EPSS score
11.96%
Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll). NOTE: this is probably a different issue than CVE-2007-6026.
7.6CVE-2000-0323microsoftjet
EPSS score
5.54%
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
7.2CVE-2000-0325microsoftjet
EPSS score
3.73%
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
7.5CVE-2004-0197microsoftjet
EPSS score
26.26%
Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.
7.5CVE-2002-0859microsoftjet+1
EPSS score
26.17%
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.