Microsoft Office Insecure Document Signing Weakness

Bugtraq ID:	26833
Class:	Design Error
CVE:	CVE-2007-6329
Remote:	Yes
Local:	No
Published:	Dec 12 2007 12:00AM
Updated:	Jan 11 2008 04:39AM
Credit:	Henrich C. Poehls, Dong Tran, Finn Petersen, and Frederic Pscheid from the Department of Informatics at the University of Hamburg are credited with the discovery of this issue.
Vulnerable:	Microsoft Office 2007 0 + Microsoft Access 2007 0 + Microsoft Access 2007 0 + Microsoft Excel 2003 + Microsoft Excel 2007 0 + Microsoft Excel 2007 0 + Microsoft FrontPage 2003 + Microsoft Groove 2007 0 + Microsoft Groove 2007 0 + Microsoft InfoPath 2003 + Microsoft InfoPath 2007 0 + Microsoft InfoPath 2007 0 + Microsoft Office Communicator 2007 0 + Microsoft Office Communicator 2007 0 + Microsoft OneNote 2003 0 + Microsoft Outlook 2003 0 + Microsoft Outlook 2007 0 + Microsoft Outlook 2007 0 + Microsoft PowerPoint 2003 0 + Microsoft PowerPoint 2007 0 + Microsoft PowerPoint 2007 0 + Microsoft Project Professional 2007 0 + Microsoft Project Professional 2007 0 + Microsoft Project Standard 2007 0 + Microsoft Project Standard 2007 0 + Microsoft Publisher 2003 + Microsoft Publisher 2007 0 + Microsoft Publisher 2007 0 + Microsoft SharePoint Designer 2007 0 + Microsoft SharePoint Designer 2007 0 + Microsoft Visio Professional 2007 0 + Microsoft Visio Professional 2007 0 + Microsoft Visio Standard 2007 0 + Microsoft Visio Standard 2007 0
Not Vulnerable:

Microsoft Office Insecure Document Signing Weakness

Microsoft Office fails to securely sign XML-based documents. Attackers can leverage this weakness to manipulate signed documents to contain malicious data in a manner such that the signature remains intact.

This weakness results in a false sense of security and could help the attacker exploit latent vulnerabilities.

Microsoft Office 2007 is vulnerable; other versions may also be affected.

Microsoft Office Insecure Document Signing Weakness

An attacker can exploit this issue using readily available text-editing utilities.

Microsoft Office Insecure Document Signing Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Office Insecure Document Signing Weakness

References:

• Microsoft Office Product Homepage (Microsoft)
  
• MS Office 2007: Digital Signature does not protect Meta-Data ([email protected])