CVEvulnerability

CVE-2007-1202

6.8 MEDIUM Published 2007-05-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."

Affected configurations

• microsoft word 2000 • microsoft word 2002 • microsoft word 2003 • microsoft word 2004 • microsoft word viewer 2003 • microsoft works 2004 • microsoft works 2005 • microsoft works 2006

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References