CVE-2007-1202: Input Validation
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1202?
CVE-2007-1202 is considered to have a high severity due to its potential to cause heap corruption and allow remote code execution.
How do I fix CVE-2007-1202?
To fix CVE-2007-1202, users should update their Microsoft Office applications to the latest security patches provided by Microsoft.
Which versions of Microsoft Office are affected by CVE-2007-1202?
CVE-2007-1202 affects Microsoft Office 2000 SP3, XP SP3, 2003 SP2, and several versions of Microsoft Works and Word Viewer.
Can CVE-2007-1202 be exploited without user interaction?
Exploitation of CVE-2007-1202 requires user assistance, such as opening a maliciously crafted document.
What types of attacks are associated with CVE-2007-1202?
CVE-2007-1202 can lead to remote code execution attacks that allow attackers to execute arbitrary code on a victim's machine.