{"api_version":"1","generated_at":"2026-07-23T03:47:41+00:00","cve":"CVE-2007-1202","urls":{"html":"https://cve.report/CVE-2007-1202","api":"https://cve.report/api/cve/CVE-2007-1202.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1202","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1202"},"summary":{"title":"CVE-2007-1202","description":"Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text \"property strings of certain control words,\" which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the \"Word RTF Parsing Vulnerability.\"","state":"PUBLISHED","assigner":"microsoft","published_at":"2007-05-08 23:19:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1900","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1900","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024","name":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Security Bulletin MS07-024 - Critical | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/1709","name":"http://www.vupen.com/english/advisories/2007/1709","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/23836","name":"http://www.securityfocus.com/bid/23836","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Microsoft Word RTF Parsing Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.kb.cert.org/vuls/id/555489","name":"http://www.kb.cert.org/vuls/id/555489","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#555489","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-128A.html","name":"http://www.us-cert.gov/cas/techalerts/TA07-128A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA07-128A -- Microsoft Updates for Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/34388","name":"http://www.osvdb.org/34388","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded","name":"http://www.securityfocus.com/archive/1/468871/100/200/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1018013","name":"http://www.securitytracker.com/id?1018013","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Microsoft Word Array and RTF Processing Bugs Let Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1202","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1202","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2000","cpe7":"sp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2002","cpe7":"sp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2003","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2004","cpe7":"*","cpe8":"mac","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word_viewer","cpe6":"2003","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"works","cpe6":"2004","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"works","cpe6":"2005","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1202","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"works","cpe6":"2006","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:50:34.731Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"HPSBST02214","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded"},{"name":"1018013","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1018013"},{"name":"20070508 Microsoft Word RTF File Parsing Heap Corruption Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525"},{"name":"SSRT071422","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded"},{"name":"ADV-2007-1709","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/1709"},{"name":"MS07-024","tags":["vendor-advisory","x_refsource_MS","x_transferred"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024"},{"name":"TA07-128A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA07-128A.html"},{"name":"34388","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/34388"},{"name":"VU#555489","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/555489"},{"name":"23836","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/23836"},{"name":"oval:org.mitre.oval:def:1900","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1900"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-05-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text \"property strings of certain control words,\" which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the \"Word RTF Parsing Vulnerability.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-16T14:57:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"HPSBST02214","tags":["vendor-advisory","x_refsource_HP"],"url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded"},{"name":"1018013","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1018013"},{"name":"20070508 Microsoft Word RTF File Parsing Heap Corruption Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525"},{"name":"SSRT071422","tags":["vendor-advisory","x_refsource_HP"],"url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded"},{"name":"ADV-2007-1709","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/1709"},{"name":"MS07-024","tags":["vendor-advisory","x_refsource_MS"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024"},{"name":"TA07-128A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA07-128A.html"},{"name":"34388","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/34388"},{"name":"VU#555489","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/555489"},{"name":"23836","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/23836"},{"name":"oval:org.mitre.oval:def:1900","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1900"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","ID":"CVE-2007-1202","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text \"property strings of certain control words,\" which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the \"Word RTF Parsing Vulnerability.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"HPSBST02214","refsource":"HP","url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded"},{"name":"1018013","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1018013"},{"name":"20070508 Microsoft Word RTF File Parsing Heap Corruption Vulnerability","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525"},{"name":"SSRT071422","refsource":"HP","url":"http://www.securityfocus.com/archive/1/468871/100/200/threaded"},{"name":"ADV-2007-1709","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/1709"},{"name":"MS07-024","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024"},{"name":"TA07-128A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA07-128A.html"},{"name":"34388","refsource":"OSVDB","url":"http://www.osvdb.org/34388"},{"name":"VU#555489","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/555489"},{"name":"23836","refsource":"BID","url":"http://www.securityfocus.com/bid/23836"},{"name":"oval:org.mitre.oval:def:1900","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1900"}]}}}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2007-1202","datePublished":"2007-05-08T23:00:00.000Z","dateReserved":"2007-03-02T00:00:00.000Z","dateUpdated":"2024-08-07T12:50:34.731Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-05-08 23:19:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C426AFDD-870F-4CAD-9E93-636714984259"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F02894C4-57A7-45FE-B9D2-1A0EE3ABA455"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A4182673-402A-4801-9A0F-2516EE923DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2004:*:mac:*:*:*:*:*","matchCriteriaId":"A90B840F-D364-4AD1-B0BE-41EC1E5B8944"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*","matchCriteriaId":"F98B6FDD-E9AA-49A4-8D9C-422DF5520A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*","matchCriteriaId":"CB8E7A05-97EE-40A4-A410-B2DE582AA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*","matchCriteriaId":"8C180D46-EEFE-416B-AB4D-A7EF0B749105"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1202","Ordinal":"1","Title":"CVE-2007-1202","CVE":"CVE-2007-1202","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1202","Ordinal":"1","NoteData":"Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text \"property strings of certain control words,\" which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the \"Word RTF Parsing Vulnerability.\"","Type":"Description","Title":"CVE-2007-1202"},{"CveYear":"2007","CveId":"1202","Ordinal":"2","NoteData":"2007-05-08","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1202","Ordinal":"3","NoteData":"2018-10-16","Type":"Other","Title":"Modified"}]}}}