CVE-2007-0209

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute…

published February 13, 2007

CVSS
—
EPSS
29%
Percentile
98.2
In the wild
Unconfirmed
What it is

⚠️ A crafty malformed drawing object in a Word file could let attackers execute arbitrary code! Think of it like receiving a birthday cake with a surprise ingredient that leaves you feeling ill. 🎂 This vulnerability is akin to a restaurant menu that lists a dish, but the chef decides to add a secret ingredient without informing the diners. One wrong bite could lead to a mixed experience—potentially harmful to your device! An unsuspecting user opens a seemingly harmless Word document, only to find their system compromised. Attackers could exploit this vulnerability to execute their malicious code, wreaking havoc on the user's device and data.

Put simply

This vulnerability is akin to a restaurant menu that lists a dish, but the chef decides to add a secret ingredient without informing the diners. One wrong bite could lead to a mixed experience—potentially harmful to your device! This vulnerability arises from Microsoft Word's failure to properly handle malformed drawing objects, leading to memory corruption when the document is opened. The result is arbitrary code execution by an attacker with user assistance required to open the file.

What to do

An unsuspecting user opens a seemingly harmless Word document, only to find their system compromised. Attackers could exploit this vulnerability to execute their malicious code, wreaking havoc on the user's device and data. To mitigate this risk, ensure you are running the latest versions of Microsoft Office applications. Apply any available security patches and educate users on the dangers of opening files from unknown sources. Regularly review your software for updates! You can handle this! Stay vigilant and keep your software updated to keep those attacks at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.29283 · 98.2th percentile
Published
2007-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute…
    cvelistv5