CVEvulnerability
CVE-2007-6329
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-255
Description
Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
Affected configurations
• microsoft office 2007
Related
Weakness · not in database (1)
References
- http://osvdb.org/44938 osvdb.org
- http://securityreason.com/securityalert/3443 securityreason.com
- http://www.securityfocus.com/archive/1/484919/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26833 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39021 exchange.xforce.ibmcloud.com
- http://osvdb.org/44938 osvdb.org
- http://securityreason.com/securityalert/3443 securityreason.com
- http://www.securityfocus.com/archive/1/484919/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26833 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39021 exchange.xforce.ibmcloud.com