Lucene search
HistoryDec 13, 2007 - 7:46 p.m.
CVE-2007-6329
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.726
Percentile
98.1%
Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
Affected configurations
Node
microsoftofficeMatch200712.0.6015.5000
ORmicrosoftofficeMatch200712.0.6017.5000
Related
cve
cve
CVE-2007-6329
2007-12-13 19:46:00
prion
prion
Design/Logic Flaw
2007-12-13 19:46:00
cvelist
cvelist
CVE-2007-6329
2007-12-13 19:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.726
Percentile
98.1%
Related for NVD:CVE-2007-6329