CVE-2007-0216

EPSS 71.27%
Published 12.02.2008 23:00:00
Last modified 09.04.2025 00:30:58
Source secure@microsoft.com
Teams watchlist Login
Open Login

wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 1 References 12

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Office Version2003 Updatesp2

Microsoft ≫ Office Version2003 Updatesp3

Microsoft ≫ Works Version8.0

Microsoft ≫ Works Version2005

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	71.27%	0.986

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://marc.info/?l=bugtraq&m=120361015026386&w=2

http://www.us-cert.gov/cas/techalerts/TA08-043C.html

US Government Resource

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=659

http://secunia.com/advisories/28904

Vendor Advisory

http://www.securityfocus.com/bid/27657

http://www.securitytracker.com/id?1019386

http://www.vupen.com/english/advisories/2008/0513/references

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5309

https://nvd.nist.gov/vuln/detail/CVE-2007-0216

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0216

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0216

EUVD