Buffer overflow in Microsoft Office and Microsoft Office for macOS - CVE-2007-0515

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability is caused by boundary error when processing malformed function in Word files. A remote attacker can create a specially crafted Word file, trick the victim into opening it and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability results in compromise of vulnerable system.

Note: this vulnerability is being actively exploited.

Affected software

How to mitigate CVE-2007-0515

Microsoft Office 2000 Service Pack 3

Microsoft Word 2000 - Download the update (KB929139)

Microsoft Office 2004 for Mac

Links to Public Exploits and PoC-codes

• Exploit #487 - Microsoft Word 2000 - Malformed Function Code Execution (March 18, 2020)
• Exploit #488 - Microsoft Word 2000 - Unspecified Code Execution (March 18, 2020)

External References

• https://technet.microsoft.com/library/security/ms07-014

Related Security Bulletins

• Remote code execution in Microsoft Word