CVE-2008-3007

CVE-2008-3007 describes an argument-injection vulnerability in the OneNote URI handler (onenote://) affecting Microsoft Office OneNote 2007 (and related Office XP/2003/2007 versions). The root cause is a Uniform Resource Locator validation error in the OneNote URL handler that can be triggered by...