CVE

Id
29686  
CVE No.
CVE-2007-6329  
Status
Candidate  
Description
Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312954 29686 CVE-2007-6329 BUGTRAQ:20071212 MS Office 2007: Digital Signature does not protect Meta-Data  View
312955 29686 CVE-2007-6329 URL:http://www.securityfocus.com/archive/1/archive/1/484919/100/0/threaded  View
312956 29686 CVE-2007-6329 BID:26833  View
312957 29686 CVE-2007-6329 URL:http://www.securityfocus.com/bid/26833  View
312958 29686 CVE-2007-6329 OSVDB:44938  View
312959 29686 CVE-2007-6329 URL:http://osvdb.org/44938  View
312960 29686 CVE-2007-6329 SREASON:3443  View
312961 29686 CVE-2007-6329 URL:http://securityreason.com/securityalert/3443  View
312962 29686 CVE-2007-6329 XF:microsoftoffice-xml-weak-security(39021)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56017 JVNDB-2007-004709 HP QLBCTRL.exe の hpinfocenter.exe における絶対パストラバーサルの脆弱性 HP Quick Launch Button (QLBCTRL.exe) の HP Info Center (hpinfocenter.exe) に付属される HPInfoDLL.dll の HPInfoDLL.HPInfo.1 ActiveX コントロールには、絶対パストラバーサルの脆弱性が存在します。 CVE-2007-6331 29686 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004709.html  View