CVE-2007-0035: Input Validation
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0035?
CVE-2007-0035 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2007-0035?
To mitigate CVE-2007-0035, ensure that you apply the latest patches and updates provided by Microsoft for the affected Office and Works Suite versions.
What versions of Microsoft Office are affected by CVE-2007-0035?
CVE-2007-0035 affects Microsoft Office 2000 SP3, XP SP3, 2003 SP2, and 2003, as well as Microsoft Office for Mac 2004.
Is Microsoft Works affected by CVE-2007-0035?
Yes, CVE-2007-0035 impacts Microsoft Works versions 2004, 2005, and 2006.
What is the nature of the vulnerability in CVE-2007-0035?
CVE-2007-0035 is an array overflow vulnerability that occurs due to improper data handling.