CVE-2007-0208

2007-02-1321:28:00

CWE-20

[email protected]

web.nvd.nist.gov

microsoft word

office 2000

office 2003

office 2004

works suite

macro content

remote code execution

cve-2007-0208

nvd

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.123 Low

EPSS

Percentile

95.4%

JSON

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.

Affected configurations

NVD

Node

microsoftofficeMatch2000sp3

microsoftofficeMatch2003sp2

microsoftofficeMatch2004mac

microsoftofficeMatchxpsp3

microsoftwordMatch2000

microsoftwordMatch2002

microsoftwordMatch2003

microsoftword_viewerMatch2003

microsoftworksMatch2004

microsoftworksMatch2005

microsoftworksMatch2006

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeq2003
microsoft:officemicrosoft officeeq2004
microsoft:officemicrosoft officeeqxp
microsoft:wordmicrosoft wordeq2000
microsoft:wordmicrosoft wordeq2002
microsoft:wordmicrosoft wordeq2003
microsoft:word_viewermicrosoft word viewereq2003
microsoft:worksmicrosoft workseq2004
microsoft:worksmicrosoft workseq2005

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	2003
microsoft:office	microsoft office	eq	2004
microsoft:office	microsoft office	eq	xp
microsoft:word	microsoft word	eq	2000
microsoft:word	microsoft word	eq	2002
microsoft:word	microsoft word	eq	2003
microsoft:word_viewer	microsoft word viewer	eq	2003
microsoft:works	microsoft works	eq	2004
microsoft:works	microsoft works	eq	2005