vulnwire
9.3crit

CVE-2007-0515in critical feed2 exploits

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denia…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
39.2%
percentile 99%
Public exploits
2
Exploit-DB

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.

Exploit prediction (EPSS)

39.20% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-3260 Microsoft Word 2000 - Code Execution · local · 2007-02-03
  • EDB-29524 Microsoft Word 2000 - Malformed Function Code Execution · remote · 2007-01-25

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • symantec.com /enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html · x_refsource_MISC, x_transferred
  • isc.sans.org /diary.html?storyid=2133 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/22225 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /31900 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/0350 · vdb-entry, x_refsource_VUPEN, x_transferred
  • us-cert.gov /cas/techalerts/TA07-044A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • securityfocus.com /bid/22328 · vdb-entry, x_refsource_BID, x_transferred
  • symantec.com /enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99&tabid=2 · x_refsource_MISC, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2007/ms07-014 · vendor-advisory, x_refsource_MS, x_transferred
  • kb.cert.org /vuls/id/412225 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • microsoft.com /technet/security/advisory/932114.mspx · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/31834 · vdb-entry, x_refsource_XF, x_transferred
  • symantec.com /enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/23950 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1017564 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.