CVE-2007-0034

Name: CVE-2007-0034
Creator: NVD / NIST
Published: 2007-01-09T23:28:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 36.84%

Last modified Jun 16, 2026

CVE-2007-0034 is a vulnerability of currently unknown severity. Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability.". EPSS estimates a 36.84% chance of exploitation in the next 30 days.

Description

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."

Metrics

EPSS Probability

36.84%

98.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions	Update
Microsoft	Office	2000	Sp3
Microsoft	Outlook	2000	—
Microsoft	Office	xp	Sp3
Microsoft	Outlook	2002	—
Microsoft	Office	2003	Sp2
Microsoft	Outlook	2003	—

References

Timeline

Published: Jan 9, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-0034?

How severe is CVE-2007-0034?

Severity scoring for CVE-2007-0034 is pending analysis. The EPSS model estimates a 36.84% probability of exploitation in the next 30 days.

How do I fix CVE-2007-0034?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-0034?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST