CVE-2007-1747 Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing ob...
HighCVSS 9.3
EPSS 31.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft office | = 2004 | No fix listed |
| Microsoft office | = 2007 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
References
- 25178 third-party-advisory vendor-advisory
- VU#853184 third-party-advisory us-government-resource
- 34396 vdb-entry
- HPSBST02214 vendor-advisory
- 23826 vdb-entry
- 1018014 vdb-entry
- TA07-128A third-party-advisory us-government-resource
- ADV-2007-1710 vdb-entry
- MS07-025 vendor-advisory
- office-drawing-code-execution(33908) vdb-entry
- oval:org.mitre.oval:def:2051 signature vdb-entry