National Cyber Awareness System

Vulnerability Summary for CVE-2007-0870

Overview

Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-128A

Name: TA07-128A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-128A.html

US-CERT Vulnerability Note: VU#332404

Name: VU#332404

Hyperlink:http://www.kb.cert.org/vuls/id/332404

External Source: XF

Name: word-document-string-code-execution(32503)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32503

External Source: VUPEN

Name: ADV-2007-1709

Hyperlink:http://www.vupen.com/english/advisories/2007/1709

External Source: VUPEN

Name: ADV-2007-0607

Hyperlink:http://www.vupen.com/english/advisories/2007/0607

External Source: HP

Name: SSRT071422

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded

External Source: MISC

Name: http://www.avertlabs.com/research/blog/?p=199

Hyperlink:http://www.avertlabs.com/research/blog/?p=199

External Source: OSVDB

Name: 33196

Hyperlink:http://osvdb.org/33196

External Source: FULLDISC

Name: 20070215 Word flaw CVE-2007-0870 confirmed as code execution type issue

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0370.html

External Source: XF

Name: word-document-string-code-execution(32503)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32503

External Source: SECTRACK

Name: 1017653

Hyperlink:http://www.securitytracker.com/id?1017653

External Source: BID

Name: 22567

Hyperlink:http://www.securityfocus.com/bid/22567

External Source: HP

Name: SSRT071422

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded

External Source: MS

Name: MS07-024

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms07-024.mspx

External Source: MISC

Name: http://www.microsoft.com/technet/security/advisory/933052.mspx

Hyperlink:http://www.microsoft.com/technet/security/advisory/933052.mspx

External Source: MISC

Name: http://www.avertlabs.com/research/blog/?p=206

Hyperlink:http://www.avertlabs.com/research/blog/?p=206

External Source: SECUNIA

Name: 24122

Hyperlink:http://secunia.com/advisories/24122

US Government Resource: oval:org.mitre.oval:def:1860

Name: oval:org.mitre.oval:def:1860

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1860

References to Check Content

Identifier:oval:org.mitre.oval:def:1860

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1860