PT-2007-1691 · Microsoft · Works Suite+3

Publicado 2007-02-13 · Atualizado 2018-10-12 · CVE-2007-0208

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word in Office versions 2000 SP3 through 2003 SP2 Microsoft Works Suite versions 2004 through 2006 Microsoft Office 2004 for Mac

Description A remote code execution issue exists in Microsoft Word, allowing attackers to execute arbitrary code if a user opens a malicious document. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with limited system privileges compared to those with administrative rights.

Recommendations For Microsoft Word in Office versions 2000 SP3 through 2003 SP2, update to a newer version that includes the fix for this issue. For Microsoft Works Suite versions 2004 through 2006, update to a newer version that includes the fix for this issue. For Microsoft Office 2004 for Mac, update to a newer version that includes the fix for this issue. As a temporary workaround, consider disabling the execution of macros in Microsoft Word until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-0208

Produtos afetados

Office 2004 For Mac

Office Word

Works Suite

Office

Referências · 12

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0208 · Nota de Segurança
• http://vupen.com/english/advisories/2007/0583 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-014 · Nota
• http://securityfocus.com/bid/22477 · Nota
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Nota
• http://securitytracker.com/id?1017639 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A700 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0208 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0208 · Nota
• http://osvdb.org/34385 · Nota
• http://frsirt.com/english/advisories/2007/0583 · Nota