Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption.

The remote host is running a version of Microsoft Office that is subject to various flaws that could allow arbitrary code to be run.

An attacker may use this to execute arbitrary code on this host.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Office.

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Word, Excel or another Office application.

ID	Name	Product	Family	Severity
31415	MS08-016: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)	Nessus	Windows : Microsoft Bulletins	high
25173	MS07-023 / MS07-024 / MS07-025: Vulnerabilities in Microsoft Office Allow Remote Code Execution (934233 / 934232 / 934873) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
25164	MS07-025: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (934873)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2007-1747

high

Tenable Plugins

high

high

high