| Vulnerability Name: | CVE-2007-1910 (CCN-33712) | ||||||||
| Assigned: | 2007-04-09 | ||||||||
| Published: | 2007-04-09 | ||||||||
| Updated: | 2017-10-19 | ||||||||
| Summary: | Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)
7.5 High (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:U/RC:UR)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2007-1910 Source: CCN Type: Microsoft Word Web page Microsoft Office Word 2007 Source: CCN Type: SECTRACK ID: 1017902 Microsoft Word Lets Remote Users Cause Arbitrary Code to Be Executed Source: CCN Type: OSVDB ID: 37633 Microsoft Word wwlib.dll Crafted Document Overflow DoS Source: BID Type: Exploit, Vendor Advisory 23380 Source: CCN Type: BID-23380 Microsoft Word 2007 WWLib.DLL Unspecified Document File Buffer Overflow Vulnerability Source: SECTRACK Type: UNKNOWN 1017902 Source: XF Type: UNKNOWN word-wwlibdll-bo(33712) Source: EXPLOIT-DB Type: UNKNOWN 3690 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||