CVE-2007-0208 Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro co...
HighCVSS 9.3
EPSS 30.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft office | = 2004 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft word | = 2000 | No fix listed |
| Microsoft word | = 2002 | No fix listed |
| Microsoft word | = 2003 | No fix listed |
| Microsoft word viewer | = 2003 | No fix listed |
| Microsoft works | = 2004 | No fix listed |
| Microsoft works | = 2005 | No fix listed |
| Microsoft works | = 2006 | No fix listed |
References
- 34385 vdb-entry
- 22477 vdb-entry
- 1017639 vdb-entry
- TA07-044A third-party-advisory us-government-resource
- ADV-2007-0583 vdb-entry vendor-advisory
- MS07-014 vendor-advisory
- oval:org.mitre.oval:def:700 signature vdb-entry