Vulnerability-Lookup

CVE-2007-0515 (GCVE-0-2007-0515)

Vulnerability from cvelistv5 – Published: 2007-01-26 00:00 – Updated: 2024-08-07 12:19

Summary

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.symantec.com/enterprise/security_respo…	x_refsource_MISC
http://isc.sans.org/diary.html?storyid=2133	x_refsource_MISC
http://www.securityfocus.com/bid/22225	vdb-entryx_refsource_BID
http://osvdb.org/31900	vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2007/0350	vdb-entryx_refsource_VUPEN
http://www.us-cert.gov/cas/techalerts/TA07-044A.html	third-party-advisoryx_refsource_CERT
http://www.securityfocus.com/bid/22328	vdb-entryx_refsource_BID
http://www.symantec.com/enterprise/security_respo…	x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates…	vendor-advisoryx_refsource_MS
http://www.kb.cert.org/vuls/id/412225	third-party-advisoryx_refsource_CERT-VN
http://www.microsoft.com/technet/security/advisor…	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.symantec.com/enterprise/security_respo…	x_refsource_MISC
http://secunia.com/advisories/23950	third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017564	vdb-entryx_refsource_SECTRACK

Date Public

2007-01-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:19:30.310Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:528",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://isc.sans.org/diary.html?storyid=2133"
          },
          {
            "name": "22225",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22225"
          },
          {
            "name": "31900",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/31900"
          },
          {
            "name": "ADV-2007-0350",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0350"
          },
          {
            "name": "TA07-044A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
          },
          {
            "name": "22328",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22328"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
          },
          {
            "name": "MS07-014",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
          },
          {
            "name": "VU#412225",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/412225"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
          },
          {
            "name": "word-document-code-execution(31834)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
          },
          {
            "name": "23950",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23950"
          },
          {
            "name": "1017564",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017564"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-01-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:528",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://isc.sans.org/diary.html?storyid=2133"
        },
        {
          "name": "22225",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22225"
        },
        {
          "name": "31900",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/31900"
        },
        {
          "name": "ADV-2007-0350",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0350"
        },
        {
          "name": "TA07-044A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
        },
        {
          "name": "22328",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22328"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
        },
        {
          "name": "MS07-014",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
        },
        {
          "name": "VU#412225",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/412225"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
        },
        {
          "name": "word-document-code-execution(31834)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
        },
        {
          "name": "23950",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23950"
        },
        {
          "name": "1017564",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017564"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0515",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:528",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
            },
            {
              "name": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html",
              "refsource": "MISC",
              "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
            },
            {
              "name": "http://isc.sans.org/diary.html?storyid=2133",
              "refsource": "MISC",
              "url": "http://isc.sans.org/diary.html?storyid=2133"
            },
            {
              "name": "22225",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22225"
            },
            {
              "name": "31900",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/31900"
            },
            {
              "name": "ADV-2007-0350",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0350"
            },
            {
              "name": "TA07-044A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
            },
            {
              "name": "22328",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22328"
            },
            {
              "name": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2",
              "refsource": "MISC",
              "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
            },
            {
              "name": "MS07-014",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
            },
            {
              "name": "VU#412225",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/412225"
            },
            {
              "name": "http://www.microsoft.com/technet/security/advisory/932114.mspx",
              "refsource": "CONFIRM",
              "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
            },
            {
              "name": "word-document-code-execution(31834)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
            },
            {
              "name": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html",
              "refsource": "MISC",
              "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
            },
            {
              "name": "23950",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23950"
            },
            {
              "name": "1017564",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017564"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0515",
    "datePublished": "2007-01-26T00:00:00.000Z",
    "dateReserved": "2007-01-25T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:19:30.310Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0515",
      "date": "2026-09-28",
      "epss": "0.38389",
      "percentile": "0.98523"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
                  "matchCriteriaId": "4891122F-AD7F-45E6-98C6-833227916F6B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
                  "matchCriteriaId": "07D3F3E4-93FB-481A-94D9-075E726697C4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
                  "matchCriteriaId": "9409A9BD-1E9B-49B8-884F-8FE569D8AA25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
                  "matchCriteriaId": "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
                  "matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
                  "matchCriteriaId": "379C2A4A-78EF-473D-954B-F5DD76C3D6CF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
                  "matchCriteriaId": "1889A686-9565-4958-99BB-2EC24ABDF272",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
                  "matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CB8E7A05-97EE-40A4-A410-B2DE582AA381",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8C180D46-EEFE-416B-AB4D-A7EF0B749105",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
        },
        {
          "lang": "es",
          "value": "Una vulnerabilidad no especificada en Microsoft Word, permite a atacantes remotos asistidos por el usuario ejecutar c\u00f3digo arbitrario en Word 2000, y causar una denegaci\u00f3n de servicio en Word 2003, por medio de vectores de ataque desconocidos que desencadenan una corrupci\u00f3n de memoria, como es explotado por Trojan.Mdropper.W y posteriores por Trojan.Mdropper.X, un problema diferente de CVE-2006-6456, CVE-2006-5994, y CVE-2006-6561."
        }
      ],
      "id": "CVE-2007-0515",
      "lastModified": "2024-11-21T00:26:03.743",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 9.3,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 10.0,
            "obtainAllPrivilege": true,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": true
          }
        ]
      },
      "published": "2007-01-26T00:28:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://isc.sans.org/diary.html?storyid=2133"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://osvdb.org/31900"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23950"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securitytracker.com/id?1017564"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.kb.cert.org/vuls/id/412225"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/22225"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/22328"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0350"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://isc.sans.org/diary.html?storyid=2133"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://osvdb.org/31900"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23950"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1017564"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.kb.cert.org/vuls/id/412225"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/22225"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/22328"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0350"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-noinfo"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
                    "matchCriteriaId": "4891122F-AD7F-45E6-98C6-833227916F6B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
                    "matchCriteriaId": "07D3F3E4-93FB-481A-94D9-075E726697C4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
                    "matchCriteriaId": "9409A9BD-1E9B-49B8-884F-8FE569D8AA25",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
                    "matchCriteriaId": "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
                    "matchCriteriaId": "379C2A4A-78EF-473D-954B-F5DD76C3D6CF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1889A686-9565-4958-99BB-2EC24ABDF272",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CB8E7A05-97EE-40A4-A410-B2DE582AA381",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8C180D46-EEFE-416B-AB4D-A7EF0B749105",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad no especificada en Microsoft Word, permite a atacantes remotos asistidos por el usuario ejecutar c\u00f3digo arbitrario en Word 2000, y causar una denegaci\u00f3n de servicio en Word 2003, por medio de vectores de ataque desconocidos que desencadenan una corrupci\u00f3n de memoria, como es explotado por Trojan.Mdropper.W y posteriores por Trojan.Mdropper.X, un problema diferente de CVE-2006-6456, CVE-2006-5994, y CVE-2006-6561."
          }
        ],
        "id": "CVE-2007-0515",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-01-26T00:28:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://isc.sans.org/diary.html?storyid=2133"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/31900"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23950"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1017564"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/412225"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/22225"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/22328"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0350"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://isc.sans.org/diary.html?storyid=2133"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/31900"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23950"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1017564"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/412225"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/22225"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/22328"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0350"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2006-ALE-014

Vulnerability from certfr_alerte - Published: - Updated:

Des vulnérabilités liées aux documents de format Word permettent l'exécution de code arbitraire à distance.

Description

4.1 Alerte du 18 décembre 2006

Trois vulnérabilités ont été découvertes dans Microsoft Word et affectent également OpenOffice. Un utilisateur malintentionné peut, en incitant sa victime à ouvrir un document au format Word (par exemple par l'intermédiaire d'un message électronique ou d'un site web), provoquer l'exécution de code arbitraire à distance avec les privilèges de l'utilisateur.

Deux codes malveillants exploitent actuellement ces vulnérabilités et sont détectés par certains antivirus (à jour) sous les noms : Troj/DwnLdr-FXG, Troj/DwnLdr-FXH, TROJ_TINY_DU, Trojan_Downloader.Win32.Cryptic.ec, Trojan_Downloader.Win32.Cryptic.f, etc.

Il n'existe pas de correctif officiel pour le moment.

4.2 Mise à jour du 26 janvier 2007

Le 26 janvier 2007, Symantec fait état d'un code malveillant exploitant une nouvelle vulnérabilité non corrigée présente dans Microsoft Word 2000 (cf. section Documentation). Ce code malveillant circule sur Internet sous forme de document Word. Il est identifié par Symantec sous le nom : Trojan.Mdropper.W.

Comme les précédente vulnérabilités, il n'existe à ce jour pas de correctif officiel.

Contournement provisoire

5.1 Utiliser un format de document alternatif

Le CERTA recommande l'utilisation d'un format de document alternatif tel que le RTF.

5.2 Utiliser un logiciel alternatif

Le CERTA recommande d'utiliser un outil de visualisation des documents au format Word alternatif à jour (WordPad ou AbiWord).

5.3 Mettre à jour la base de signatures d'antivirus

Certains éditeurs d'antivirus proposent déjà des mises à jours de signatures prenant en compte les codes malveillants sous sa forme actuelle. Il est cependant probable que des variantes apparaissent afin de contourner ces antivirus.

5.4 Filtrer les pièces jointes au niveau des passerelles

Dans la mesure du possible, il est recommandé de filtrer les fichiers au format Word (extension .doc) au niveau des passerelles (messagerie, web ...).

5.5 N'ouvrir que les documents provenant de sources de confiance

A la reception d'un document au format doc soit par le biais de la messagerie électronique ou sur tout autre support, il est nécessaire de s'assurer de la provenance de ce fichier et de ne l'ouvrir que si la source est de confiance et après analyse par un antivirus à jour.

5.6 Limiter l'impact en utilisant un compte utilisateur sans privilège

L'utilisation de compte n'ayant pas de droits d'administration permet de limiter l'infection au contexte de l'utilisateur.

Solution

Appliquer les mises à jours de l'éditeur (cf. Documentation);

Microsoft Word 2000 ;
Microsoft Word 2002 ;
Microsoft Word 2003 ;
Microsoft Word Viewer 2003 ;
Microsoft Word 2004 pour Mac ;
Microsoft Word 2004 v. X pour Mac ;
Microsoft Works 2004, 2005 et 2006 ;
OpenOffice versions 2.x et antérieurs.

D'autres applications pourraient être affectées par ces vulnérabilités.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft 929433	None	vendor-advisory
Avis du CERTA numero CERTA-2007-AVI-083 du 14 février 2007:	-	other
Bulletins de mise à jour Microsoft MS07-014 et MS07-015 du 13 février 2007 :	-	other
Annonce du bloc-note de Symantec du 26 janvier 2007 :	-	other
Annonce sur le bloc-notes Microsoft de la seconde vulnérabilité, le 10 décembre 2006 :	-	other
Bulletins de mise à jour Microsoft MS07-014 et MS07-015 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft 932114 du 26 janvier 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eMicrosoft Word 2000 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2002 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word Viewer 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 v. X pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Works 2004, 2005 et 2006 ;\u003c/LI\u003e    \u003cLI\u003eOpenOffice versions 2.x et ant\u00e9rieurs.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eD\u0027autres applications pourraient \u00eatre affect\u00e9es par ces  vuln\u00e9rabilit\u00e9s.\u003c/P\u003e",
  "closed_at": "2007-02-14",
  "content": "## Description\n\n## 4.1 Alerte du 18 d\u00e9cembre 2006\n\nTrois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Word et\naffectent \u00e9galement OpenOffice. Un utilisateur malintentionn\u00e9 peut, en\nincitant sa victime \u00e0 ouvrir un document au format Word (par exemple par\nl\u0027interm\u00e9diaire d\u0027un message \u00e9lectronique ou d\u0027un site web), provoquer\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance avec les privil\u00e8ges de\nl\u0027utilisateur.\n\nDeux codes malveillants exploitent actuellement ces vuln\u00e9rabilit\u00e9s et\nsont d\u00e9tect\u00e9s par certains antivirus (\u00e0 jour) sous les noms :\nTroj/DwnLdr-FXG, Troj/DwnLdr-FXH, TROJ_TINY_DU,\nTrojan_Downloader.Win32.Cryptic.ec, Trojan_Downloader.Win32.Cryptic.f,\netc.\n\nIl n\u0027existe pas de correctif officiel pour le moment.\n\n## 4.2 Mise \u00e0 jour du 26 janvier 2007\n\nLe 26 janvier 2007, Symantec fait \u00e9tat d\u0027un code malveillant exploitant\nune nouvelle vuln\u00e9rabilit\u00e9 non corrig\u00e9e pr\u00e9sente dans Microsoft Word\n2000 (cf. section Documentation). Ce code malveillant circule sur\nInternet sous forme de document Word. Il est identifi\u00e9 par Symantec sous\nle nom : Trojan.Mdropper.W.\n\nComme les pr\u00e9c\u00e9dente vuln\u00e9rabilit\u00e9s, il n\u0027existe \u00e0 ce jour pas de\ncorrectif officiel.\n\n## Contournement provisoire\n\n## 5.1 Utiliser un format de document alternatif\n\nLe CERTA recommande l\u0027utilisation d\u0027un format de document alternatif tel\nque le RTF.\n\n## 5.2 Utiliser un logiciel alternatif\n\nLe CERTA recommande d\u0027utiliser un outil de visualisation des documents\nau format Word alternatif \u00e0 jour (WordPad ou AbiWord).\n\n## 5.3 Mettre \u00e0 jour la base de signatures d\u0027antivirus\n\nCertains \u00e9diteurs d\u0027antivirus proposent d\u00e9j\u00e0 des mises \u00e0 jours de\nsignatures prenant en compte les codes malveillants sous sa forme\nactuelle. Il est cependant probable que des variantes apparaissent afin\nde contourner ces antivirus.\n\n## 5.4 Filtrer les pi\u00e8ces jointes au niveau des passerelles\n\nDans la mesure du possible, il est recommand\u00e9 de filtrer les fichiers au\nformat Word (extension .doc) au niveau des passerelles (messagerie, web\n...).\n\n## 5.5 N\u0027ouvrir que les documents provenant de sources de confiance\n\nA la reception d\u0027un document au format doc soit par le biais de la\nmessagerie \u00e9lectronique ou sur tout autre support, il est n\u00e9cessaire de\ns\u0027assurer de la provenance de ce fichier et de ne l\u0027ouvrir que si la\nsource est de confiance et apr\u00e8s analyse par un antivirus \u00e0 jour.\n\n## 5.6 Limiter l\u0027impact en utilisant un compte utilisateur sans privil\u00e8ge\n\nL\u0027utilisation de compte n\u0027ayant pas de droits d\u0027administration permet de\nlimiter l\u0027infection au contexte de l\u0027utilisateur.\n\n## Solution\n\nAppliquer les mises \u00e0 jours de l\u0027\u00e9diteur (cf. Documentation);\n",
  "cves": [
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    }
  ],
  "links": [
    {
      "title": "Avis du CERTA numero CERTA-2007-AVI-083 du 14 f\u00e9vrier 2007:",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2007-AVI-083/index.html"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-015.mspx"
    },
    {
      "title": "Annonce du bloc-note de Symantec du 26 janvier 2007 :",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "title": "Annonce sur le bloc-notes Microsoft de la seconde    vuln\u00e9rabilit\u00e9, le 10 d\u00e9cembre 2006 :",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 932114 du 26 janvier 2007 :",
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    }
  ],
  "reference": "CERTA-2006-ALE-014",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-12-06T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 annonc\u00e9e par Microsoft.",
      "revision_date": "2006-12-12T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9, ajout des r\u00e9f\u00e9rences CVE.",
      "revision_date": "2006-12-15T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027affectation d\u0027OpenOffice.",
      "revision_date": "2006-12-18T00:00:00.000000"
    },
    {
      "description": "annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 par Symantec.",
      "revision_date": "2007-01-26T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Microsoft et CVE.",
      "revision_date": "2007-01-30T00:00:00.000000"
    },
    {
      "description": "ajout du correctif.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Des vuln\u00e9rabilit\u00e9s li\u00e9es aux documents de format Word permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Microsoft Word",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 929433",
      "url": "http://www.microsoft.com/technet/security/advisory/929433.mspx"
    }
  ]
}

CERTA-2006-ALE-014

Vulnerability from certfr_alerte - Published: - Updated:

Des vulnérabilités liées aux documents de format Word permettent l'exécution de code arbitraire à distance.

Description

4.1 Alerte du 18 décembre 2006

Il n'existe pas de correctif officiel pour le moment.

4.2 Mise à jour du 26 janvier 2007

Comme les précédente vulnérabilités, il n'existe à ce jour pas de correctif officiel.

Contournement provisoire

5.1 Utiliser un format de document alternatif

Le CERTA recommande l'utilisation d'un format de document alternatif tel que le RTF.

5.2 Utiliser un logiciel alternatif

Le CERTA recommande d'utiliser un outil de visualisation des documents au format Word alternatif à jour (WordPad ou AbiWord).

5.3 Mettre à jour la base de signatures d'antivirus

5.4 Filtrer les pièces jointes au niveau des passerelles

Dans la mesure du possible, il est recommandé de filtrer les fichiers au format Word (extension .doc) au niveau des passerelles (messagerie, web ...).

5.5 N'ouvrir que les documents provenant de sources de confiance

5.6 Limiter l'impact en utilisant un compte utilisateur sans privilège

L'utilisation de compte n'ayant pas de droits d'administration permet de limiter l'infection au contexte de l'utilisateur.

Solution

Appliquer les mises à jours de l'éditeur (cf. Documentation);

Microsoft Word 2000 ;
Microsoft Word 2002 ;
Microsoft Word 2003 ;
Microsoft Word Viewer 2003 ;
Microsoft Word 2004 pour Mac ;
Microsoft Word 2004 v. X pour Mac ;
Microsoft Works 2004, 2005 et 2006 ;
OpenOffice versions 2.x et antérieurs.

D'autres applications pourraient être affectées par ces vulnérabilités.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft 929433	None	vendor-advisory
Avis du CERTA numero CERTA-2007-AVI-083 du 14 février 2007:	-	other
Bulletins de mise à jour Microsoft MS07-014 et MS07-015 du 13 février 2007 :	-	other
Annonce du bloc-note de Symantec du 26 janvier 2007 :	-	other
Annonce sur le bloc-notes Microsoft de la seconde vulnérabilité, le 10 décembre 2006 :	-	other
Bulletins de mise à jour Microsoft MS07-014 et MS07-015 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft 932114 du 26 janvier 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eMicrosoft Word 2000 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2002 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word Viewer 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 v. X pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Works 2004, 2005 et 2006 ;\u003c/LI\u003e    \u003cLI\u003eOpenOffice versions 2.x et ant\u00e9rieurs.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eD\u0027autres applications pourraient \u00eatre affect\u00e9es par ces  vuln\u00e9rabilit\u00e9s.\u003c/P\u003e",
  "closed_at": "2007-02-14",
  "content": "## Description\n\n## 4.1 Alerte du 18 d\u00e9cembre 2006\n\nTrois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Word et\naffectent \u00e9galement OpenOffice. Un utilisateur malintentionn\u00e9 peut, en\nincitant sa victime \u00e0 ouvrir un document au format Word (par exemple par\nl\u0027interm\u00e9diaire d\u0027un message \u00e9lectronique ou d\u0027un site web), provoquer\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance avec les privil\u00e8ges de\nl\u0027utilisateur.\n\nDeux codes malveillants exploitent actuellement ces vuln\u00e9rabilit\u00e9s et\nsont d\u00e9tect\u00e9s par certains antivirus (\u00e0 jour) sous les noms :\nTroj/DwnLdr-FXG, Troj/DwnLdr-FXH, TROJ_TINY_DU,\nTrojan_Downloader.Win32.Cryptic.ec, Trojan_Downloader.Win32.Cryptic.f,\netc.\n\nIl n\u0027existe pas de correctif officiel pour le moment.\n\n## 4.2 Mise \u00e0 jour du 26 janvier 2007\n\nLe 26 janvier 2007, Symantec fait \u00e9tat d\u0027un code malveillant exploitant\nune nouvelle vuln\u00e9rabilit\u00e9 non corrig\u00e9e pr\u00e9sente dans Microsoft Word\n2000 (cf. section Documentation). Ce code malveillant circule sur\nInternet sous forme de document Word. Il est identifi\u00e9 par Symantec sous\nle nom : Trojan.Mdropper.W.\n\nComme les pr\u00e9c\u00e9dente vuln\u00e9rabilit\u00e9s, il n\u0027existe \u00e0 ce jour pas de\ncorrectif officiel.\n\n## Contournement provisoire\n\n## 5.1 Utiliser un format de document alternatif\n\nLe CERTA recommande l\u0027utilisation d\u0027un format de document alternatif tel\nque le RTF.\n\n## 5.2 Utiliser un logiciel alternatif\n\nLe CERTA recommande d\u0027utiliser un outil de visualisation des documents\nau format Word alternatif \u00e0 jour (WordPad ou AbiWord).\n\n## 5.3 Mettre \u00e0 jour la base de signatures d\u0027antivirus\n\nCertains \u00e9diteurs d\u0027antivirus proposent d\u00e9j\u00e0 des mises \u00e0 jours de\nsignatures prenant en compte les codes malveillants sous sa forme\nactuelle. Il est cependant probable que des variantes apparaissent afin\nde contourner ces antivirus.\n\n## 5.4 Filtrer les pi\u00e8ces jointes au niveau des passerelles\n\nDans la mesure du possible, il est recommand\u00e9 de filtrer les fichiers au\nformat Word (extension .doc) au niveau des passerelles (messagerie, web\n...).\n\n## 5.5 N\u0027ouvrir que les documents provenant de sources de confiance\n\nA la reception d\u0027un document au format doc soit par le biais de la\nmessagerie \u00e9lectronique ou sur tout autre support, il est n\u00e9cessaire de\ns\u0027assurer de la provenance de ce fichier et de ne l\u0027ouvrir que si la\nsource est de confiance et apr\u00e8s analyse par un antivirus \u00e0 jour.\n\n## 5.6 Limiter l\u0027impact en utilisant un compte utilisateur sans privil\u00e8ge\n\nL\u0027utilisation de compte n\u0027ayant pas de droits d\u0027administration permet de\nlimiter l\u0027infection au contexte de l\u0027utilisateur.\n\n## Solution\n\nAppliquer les mises \u00e0 jours de l\u0027\u00e9diteur (cf. Documentation);\n",
  "cves": [
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    }
  ],
  "links": [
    {
      "title": "Avis du CERTA numero CERTA-2007-AVI-083 du 14 f\u00e9vrier 2007:",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2007-AVI-083/index.html"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-015.mspx"
    },
    {
      "title": "Annonce du bloc-note de Symantec du 26 janvier 2007 :",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "title": "Annonce sur le bloc-notes Microsoft de la seconde    vuln\u00e9rabilit\u00e9, le 10 d\u00e9cembre 2006 :",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 932114 du 26 janvier 2007 :",
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    }
  ],
  "reference": "CERTA-2006-ALE-014",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-12-06T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 annonc\u00e9e par Microsoft.",
      "revision_date": "2006-12-12T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9, ajout des r\u00e9f\u00e9rences CVE.",
      "revision_date": "2006-12-15T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027affectation d\u0027OpenOffice.",
      "revision_date": "2006-12-18T00:00:00.000000"
    },
    {
      "description": "annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 par Symantec.",
      "revision_date": "2007-01-26T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Microsoft et CVE.",
      "revision_date": "2007-01-30T00:00:00.000000"
    },
    {
      "description": "ajout du correctif.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Des vuln\u00e9rabilit\u00e9s li\u00e9es aux documents de format Word permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Microsoft Word",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 929433",
      "url": "http://www.microsoft.com/technet/security/advisory/929433.mspx"
    }
  ]
}

CERTA-2007-AVI-083

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités touchent les suites bureautique de Microsoft. L'exploitation de ces vulnérabilités peut conduire à l'exécution de code arbitraire à distance.

Description

De nombreuses vulnérabilités, dont certaines ayant déjà fait l'objet d'une alerte du CERTA (CERTA-2006-ALE-014, CERTA-2007-ALE-004), touchent les produits bureautiques de Microsoft. L'exploitation de ces vulnérabilités peut être conduit depuis le système vulnérable et/ou à distance, et permet l'exéction de code arbitraire. Cette exécution de code peut conduire à l'obtention du contrôle total de la machine vulnérable.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Office	Microsoft Visio 2002.
Microsoft	Office	Toutes versions de la suite Microsoft Office, à l'exception de Microsoft Office 2007 ;
Microsoft	Office	Microsoft Project versions 2000 et 2002 ;
Microsoft	Office	Microsoft Works Suite versions 2004, 2005 et 2006 ;

References

Title

Publication Time

Tags

Bulletin de sécurité MS07-014 de Microsoft du 13 février 2007	None	vendor-advisory
Bulletin de sécurité MS07-015 de Microsoft du 13 février 2007	None	vendor-advisory
Bulletin de sécurité Microsoft MS07-015 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-014 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-015 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-014 du 13 février 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Visio 2002.",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Toutes versions de la suite Microsoft Office, \u00e0 l\u0027exception de Microsoft Office 2007 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Project versions 2000 et 2002 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite versions 2004, 2005 et 2006 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe nombreuses vuln\u00e9rabilit\u00e9s, dont certaines ayant d\u00e9j\u00e0 fait l\u0027objet\nd\u0027une alerte du CERTA (CERTA-2006-ALE-014, CERTA-2007-ALE-004), touchent\nles produits bureautiques de Microsoft. L\u0027exploitation de ces\nvuln\u00e9rabilit\u00e9s peut \u00eatre conduit depuis le syst\u00e8me vuln\u00e9rable et/ou \u00e0\ndistance, et permet l\u0027ex\u00e9ction de code arbitraire. Cette ex\u00e9cution de\ncode peut conduire \u00e0 l\u0027obtention du contr\u00f4le total de la machine\nvuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0671"
    },
    {
      "name": "CVE-2006-3877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3877"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    },
    {
      "name": "CVE-2007-0208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0208"
    },
    {
      "name": "CVE-2007-0209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0209"
    },
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-014.mspx"
    }
  ],
  "reference": "CERTA-2007-AVI-083",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s touchent les suites bureautique de\nMicrosoft. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s peut conduire \u00e0\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de Microsoft Office",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-014 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-015 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    }
  ]
}

CERTA-2007-AVI-083

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités touchent les suites bureautique de Microsoft. L'exploitation de ces vulnérabilités peut conduire à l'exécution de code arbitraire à distance.

Description

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Office	Microsoft Visio 2002.
Microsoft	Office	Toutes versions de la suite Microsoft Office, à l'exception de Microsoft Office 2007 ;
Microsoft	Office	Microsoft Project versions 2000 et 2002 ;
Microsoft	Office	Microsoft Works Suite versions 2004, 2005 et 2006 ;

References

Title

Publication Time

Tags

Bulletin de sécurité MS07-014 de Microsoft du 13 février 2007	None	vendor-advisory
Bulletin de sécurité MS07-015 de Microsoft du 13 février 2007	None	vendor-advisory
Bulletin de sécurité Microsoft MS07-015 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-014 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-015 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-014 du 13 février 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Visio 2002.",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Toutes versions de la suite Microsoft Office, \u00e0 l\u0027exception de Microsoft Office 2007 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Project versions 2000 et 2002 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite versions 2004, 2005 et 2006 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe nombreuses vuln\u00e9rabilit\u00e9s, dont certaines ayant d\u00e9j\u00e0 fait l\u0027objet\nd\u0027une alerte du CERTA (CERTA-2006-ALE-014, CERTA-2007-ALE-004), touchent\nles produits bureautiques de Microsoft. L\u0027exploitation de ces\nvuln\u00e9rabilit\u00e9s peut \u00eatre conduit depuis le syst\u00e8me vuln\u00e9rable et/ou \u00e0\ndistance, et permet l\u0027ex\u00e9ction de code arbitraire. Cette ex\u00e9cution de\ncode peut conduire \u00e0 l\u0027obtention du contr\u00f4le total de la machine\nvuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0671"
    },
    {
      "name": "CVE-2006-3877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3877"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    },
    {
      "name": "CVE-2007-0208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0208"
    },
    {
      "name": "CVE-2007-0209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0209"
    },
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-014.mspx"
    }
  ],
  "reference": "CERTA-2007-AVI-083",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s touchent les suites bureautique de\nMicrosoft. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s peut conduire \u00e0\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de Microsoft Office",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-014 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-015 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    }
  ]
}

FKIE_CVE-2007-0515

Vulnerability from fkie_nvd - Published: 2007-01-26 00:28 - Updated: 2026-06-16 22:35

Severity

Summary

References

URL	Tags
cve@mitre.org	http://isc.sans.org/diary.html?storyid=2133
cve@mitre.org	http://osvdb.org/31900
cve@mitre.org	http://secunia.com/advisories/23950	Vendor Advisory
cve@mitre.org	http://securitytracker.com/id?1017564
cve@mitre.org	http://www.kb.cert.org/vuls/id/412225	US Government Resource
cve@mitre.org	http://www.microsoft.com/technet/security/advisory/932114.mspx	Vendor Advisory
cve@mitre.org	http://www.securityfocus.com/bid/22225
cve@mitre.org	http://www.securityfocus.com/bid/22328
cve@mitre.org	http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html
cve@mitre.org	http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html
cve@mitre.org	http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99&tabid=2
cve@mitre.org	http://www.us-cert.gov/cas/techalerts/TA07-044A.html	US Government Resource
cve@mitre.org	http://www.vupen.com/english/advisories/2007/0350	Vendor Advisory
cve@mitre.org	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/31834
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528
af854a3a-2127-422b-91ae-364da2661108	http://isc.sans.org/diary.html?storyid=2133
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/31900
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23950	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1017564
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/412225	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.microsoft.com/technet/security/advisory/932114.mspx	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22225
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22328
af854a3a-2127-422b-91ae-364da2661108	http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html
af854a3a-2127-422b-91ae-364da2661108	http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html
af854a3a-2127-422b-91ae-364da2661108	http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99&tabid=2
af854a3a-2127-422b-91ae-364da2661108	http://www.us-cert.gov/cas/techalerts/TA07-044A.html	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/0350	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/31834
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528

Impacted products

Vendor	Product	Version
microsoft	office	2000
microsoft	office	2003
microsoft	office	2004
microsoft	office	xp
microsoft	word	2000
microsoft	word	2002
microsoft	word	2003
microsoft	word_viewer	2003
microsoft	works	2004
microsoft	works	2005
microsoft	works	2006

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "4891122F-AD7F-45E6-98C6-833227916F6B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "07D3F3E4-93FB-481A-94D9-075E726697C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
              "matchCriteriaId": "9409A9BD-1E9B-49B8-884F-8FE569D8AA25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
              "matchCriteriaId": "379C2A4A-78EF-473D-954B-F5DD76C3D6CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
              "matchCriteriaId": "1889A686-9565-4958-99BB-2EC24ABDF272",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
              "matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB8E7A05-97EE-40A4-A410-B2DE582AA381",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C180D46-EEFE-416B-AB4D-A7EF0B749105",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad no especificada en Microsoft Word, permite a atacantes remotos asistidos por el usuario ejecutar c\u00f3digo arbitrario en Word 2000, y causar una denegaci\u00f3n de servicio en Word 2003, por medio de vectores de ataque desconocidos que desencadenan una corrupci\u00f3n de memoria, como es explotado por Trojan.Mdropper.W y posteriores por Trojan.Mdropper.X, un problema diferente de CVE-2006-6456, CVE-2006-5994, y CVE-2006-6561."
    }
  ],
  "id": "CVE-2007-0515",
  "lastModified": "2026-06-16T22:35:43.900",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-01-26T00:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://isc.sans.org/diary.html?storyid=2133"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/31900"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23950"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017564"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/412225"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/22225"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/22328"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/0350"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://isc.sans.org/diary.html?storyid=2133"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/31900"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23950"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017564"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/412225"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22225"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22328"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/0350"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-GW2R-9WM8-VX4V

Vulnerability from github – Published: 2022-05-01 17:45 – Updated: 2022-05-01 17:45

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0515"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-01-26T00:28:00Z",
    "severity": "HIGH"
  },
  "details": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.",
  "id": "GHSA-gw2r-9wm8-vx4v",
  "modified": "2022-05-01T17:45:00Z",
  "published": "2022-05-01T17:45:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0515"
    },
    {
      "type": "WEB",
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
    },
    {
      "type": "WEB",
      "url": "http://isc.sans.org/diary.html?storyid=2133"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/31900"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23950"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1017564"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/412225"
    },
    {
      "type": "WEB",
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22225"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22328"
    },
    {
      "type": "WEB",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
    },
    {
      "type": "WEB",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "type": "WEB",
      "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0350"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0515

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-0515

Aliases

CVE-2007-0515

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0515",
    "description": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.",
    "id": "GSD-2007-0515"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0515"
      ],
      "details": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.",
      "id": "GSD-2007-0515",
      "modified": "2023-12-13T01:21:35.259990Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-0515",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "oval:org.mitre.oval:def:528",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
          },
          {
            "name": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html",
            "refsource": "MISC",
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
          },
          {
            "name": "http://isc.sans.org/diary.html?storyid=2133",
            "refsource": "MISC",
            "url": "http://isc.sans.org/diary.html?storyid=2133"
          },
          {
            "name": "22225",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/22225"
          },
          {
            "name": "31900",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/31900"
          },
          {
            "name": "ADV-2007-0350",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/0350"
          },
          {
            "name": "TA07-044A",
            "refsource": "CERT",
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
          },
          {
            "name": "22328",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/22328"
          },
          {
            "name": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2",
            "refsource": "MISC",
            "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
          },
          {
            "name": "MS07-014",
            "refsource": "MS",
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
          },
          {
            "name": "VU#412225",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/412225"
          },
          {
            "name": "http://www.microsoft.com/technet/security/advisory/932114.mspx",
            "refsource": "CONFIRM",
            "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
          },
          {
            "name": "word-document-code-execution(31834)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
          },
          {
            "name": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html",
            "refsource": "MISC",
            "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
          },
          {
            "name": "23950",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23950"
          },
          {
            "name": "1017564",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1017564"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0515"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
            },
            {
              "name": "22225",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/22225"
            },
            {
              "name": "http://isc.sans.org/diary.html?storyid=2133",
              "refsource": "MISC",
              "tags": [],
              "url": "http://isc.sans.org/diary.html?storyid=2133"
            },
            {
              "name": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html"
            },
            {
              "name": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99\u0026tabid=2"
            },
            {
              "name": "http://www.microsoft.com/technet/security/advisory/932114.mspx",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
            },
            {
              "name": "VU#412225",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/412225"
            },
            {
              "name": "22328",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/22328"
            },
            {
              "name": "1017564",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1017564"
            },
            {
              "name": "23950",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23950"
            },
            {
              "name": "TA07-044A",
              "refsource": "CERT",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
            },
            {
              "name": "31900",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/31900"
            },
            {
              "name": "ADV-2007-0350",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0350"
            },
            {
              "name": "word-document-code-execution(31834)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31834"
            },
            {
              "name": "oval:org.mitre.oval:def:528",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528"
            },
            {
              "name": "MS07-014",
              "refsource": "MS",
              "tags": [],
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-12T21:42Z",
      "publishedDate": "2007-01-26T00:28Z"
    }
  }
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0515 (GCVE-0-2007-0515)

CERTA-2006-ALE-014

Description

4.1 Alerte du 18 décembre 2006

4.2 Mise à jour du 26 janvier 2007

Contournement provisoire

5.1 Utiliser un format de document alternatif

5.2 Utiliser un logiciel alternatif

5.3 Mettre à jour la base de signatures d'antivirus

5.4 Filtrer les pièces jointes au niveau des passerelles

5.5 N'ouvrir que les documents provenant de sources de confiance

5.6 Limiter l'impact en utilisant un compte utilisateur sans privilège

Solution

CERTA-2006-ALE-014

Description

4.1 Alerte du 18 décembre 2006

4.2 Mise à jour du 26 janvier 2007

Contournement provisoire

5.1 Utiliser un format de document alternatif

5.2 Utiliser un logiciel alternatif

5.3 Mettre à jour la base de signatures d'antivirus

5.4 Filtrer les pièces jointes au niveau des passerelles

5.5 N'ouvrir que les documents provenant de sources de confiance

5.6 Limiter l'impact en utilisant un compte utilisateur sans privilège

Solution

CERTA-2007-AVI-083

Description

Solution

CERTA-2007-AVI-083

Description

Solution

FKIE_CVE-2007-0515

GHSA-GW2R-9WM8-VX4V

GSD-2007-0515

Tags

Sightings

Nomenclature

Related by attack behaviour