CVE-2007-1747: Critical severity Microsoft Office vulnerability

Published May 8, 2007

Updated

Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.

Affected Software

5 affected components

Microsoft Office=2004

Microsoft Office=xp-sp3

Microsoft Office=2003-sp2

Microsoft Office=2007

Microsoft Office=2000-sp3

Event History

May 8, 2007

CVE Published

11:19 PM

May 9, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1747?

CVE-2007-1747 is classified as a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2007-1747?

To mitigate CVE-2007-1747, update to the latest service packs or patches provided by Microsoft for affected versions of Office.

What versions of Microsoft Office are affected by CVE-2007-1747?

CVE-2007-1747 affects Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007.

What type of attack does CVE-2007-1747 enable?

CVE-2007-1747 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object.

What component is vulnerable in CVE-2007-1747?

The vulnerability in CVE-2007-1747 resides in the MSO.dll component of Microsoft Office.