CVE-2007-0515

EPSS 38.2%

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/3260unverified exploitdbwww.exploit-db.com/exploits/29524unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://isc.sans.org/diary.html?storyid=2133 http://osvdb.org/31900 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 http://secunia.com/advisories/23950 http://securitytracker.com/id?1017564 https://exchange.xforce.ibmcloud.com/vulnerabilities/31834 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528 http://www.kb.cert.org/vuls/id/412225 http://www.microsoft.com/technet/security/advisory/932114.mspx http://www.securityfocus.com/bid/22225 http://www.securityfocus.com/bid/22328 http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html