QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-1202

Back to search

CVE-2007-1202

Published: May 8, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

HPSBST02214
vendor-advisory
x_refsource_HP
1018013
vdb-entry
x_refsource_SECTRACK
SSRT071422
vendor-advisory
x_refsource_HP
ADV-2007-1709
vdb-entry
x_refsource_VUPEN
MS07-024
vendor-advisory
x_refsource_MS
TA07-128A
third-party-advisory
x_refsource_CERT
34388
vdb-entry
x_refsource_OSVDB
VU#555489
third-party-advisory
x_refsource_CERT-VN
23836
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:1900
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now