CVE-2007-0515

2007-01-2600:28:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2007-0515

microsoft word

user-assisted

remote attackers

execute arbitrary code

denial of service

memory corruption

trojan.mdropper.w

trojan.mdropper.x

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.964 High

EPSS

Percentile

99.6%

JSON

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.

CPENameOperatorVersion
microsoft:worksmicrosoft workseq2006
microsoft:officemicrosoft officeeq2004
microsoft:wordmicrosoft wordeq2000
microsoft:officemicrosoft officeeqxp
microsoft:officemicrosoft officeeq2003
microsoft:wordmicrosoft wordeq2003
microsoft:worksmicrosoft workseq2005
microsoft:wordmicrosoft wordeq2002
microsoft:word_viewermicrosoft word viewereq2003
microsoft:worksmicrosoft workseq2004

CPE	Name	Operator	Version
microsoft:works	microsoft works	eq	2006
microsoft:office	microsoft office	eq	2004
microsoft:word	microsoft word	eq	2000
microsoft:office	microsoft office	eq	xp
microsoft:office	microsoft office	eq	2003
microsoft:word	microsoft word	eq	2003
microsoft:works	microsoft works	eq	2005
microsoft:word	microsoft word	eq	2002
microsoft:word_viewer	microsoft word viewer	eq	2003
microsoft:works	microsoft works	eq	2004