VULNERABILITY INTELLIGENCE
CVE-2007-0208
CVSS score9.3 HIGH
EPSS probability30.31%
CISA KEVNot currently listed
Published2007-02-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com — US Government Resource
- secure@microsoft.com — Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory