CVE

Id
24559  
CVE No.
CVE-2007-1202  
Status
Candidate  
Description
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242063 24559 CVE-2007-1202 IDEFENSE:20070508 Microsoft Word RTF File Parsing Heap Corruption Vulnerability  View
242064 24559 CVE-2007-1202 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525  View
242065 24559 CVE-2007-1202 HP:HPSBST02214  View
242066 24559 CVE-2007-1202 URL:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded  View
242067 24559 CVE-2007-1202 HP:SSRT071422  View
242068 24559 CVE-2007-1202 URL:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded  View
242069 24559 CVE-2007-1202 MS:MS07-024  View
242070 24559 CVE-2007-1202 URL:http://www.microsoft.com/technet/security/bulletin/ms07-024.mspx  View
242071 24559 CVE-2007-1202 CERT:TA07-128A  View
242072 24559 CVE-2007-1202 URL:http://www.us-cert.gov/cas/techalerts/TA07-128A.html  View
242073 24559 CVE-2007-1202 CERT-VN:VU#555489  View
242074 24559 CVE-2007-1202 URL:http://www.kb.cert.org/vuls/id/555489  View
242075 24559 CVE-2007-1202 BID:23836  View
242076 24559 CVE-2007-1202 URL:http://www.securityfocus.com/bid/23836  View
242077 24559 CVE-2007-1202 VUPEN:ADV-2007-1709  View
242078 24559 CVE-2007-1202 URL:http://www.vupen.com/english/advisories/2007/1709  View
242079 24559 CVE-2007-1202 OSVDB:34388  View
242080 24559 CVE-2007-1202 URL:http://www.osvdb.org/34388  View
242081 24559 CVE-2007-1202 OVAL:oval:org.mitre.oval:def:1900  View
242082 24559 CVE-2007-1202 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1900  View
242083 24559 CVE-2007-1202 SECTRACK:1018013  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51599 JVNDB-2007-000261 Microsoft Windows XP の UPnP サービスにおけるバッファオーバーフローの脆弱性 Microsoft Windows XP の ユニバーサルプラグアンドプレイ (UPnP) サービスには、HTTP ヘッダの処理に不備が存在するため、不正な HTTP リクエストを処理する際に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-1204 24559 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000261.html  View