SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2007-1910

Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.

MEDIUM 6.8EPSS 24.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 24.9%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc.

CVSS 2.0
6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
24.95% probability · 98th percentile
CISA KEV
Not listed
Affected
microsoft/word
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.