CVEvulnerability
CVE-2007-0208
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
Affected configurations
• microsoft office 2000
• microsoft office 2003
• microsoft office 2004
• microsoft office xp
• microsoft word 2000
• microsoft word 2002
• microsoft word 2003
• microsoft word viewer 2003
• microsoft works 2004
• microsoft works 2005
• microsoft works 2006
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.osvdb.org/34385 www.osvdb.org
- http://www.securityfocus.com/bid/22477 www.securityfocus.com
- http://www.securitytracker.com/id?1017639 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/0583 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A700 oval.cisecurity.org
- http://www.osvdb.org/34385 www.osvdb.org
- http://www.securityfocus.com/bid/22477 www.securityfocus.com
- http://www.securitytracker.com/id?1017639 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/0583 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A700 oval.cisecurity.org