CVE-2007-0515
EXPLOITEDMicrosoft Word 2000 and 2003 - Remote Code Execution and Denial of Service via Memory Corruption
Title source: llmExploitation Summary
CVE-2007-0515 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including xCuter, Symantec.
AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in Microsoft Word 2000 via a malformed string in a crafted Word file, leading to arbitrary command execution (e.g., CMD.EXE). It also causes a DoS in Word 2003/XP by consuming CPU resources.
Description
Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.
Exploits (2)
This exploit targets a memory corruption vulnerability in Microsoft Word 2000 via a malformed string in a crafted Word file, leading to arbitrary command execution (e.g., CMD.EXE). It also causes a DoS in Word 2003/XP by consuming CPU resources.
This is a vulnerability writeup describing a remote code execution issue in Microsoft Word 2000. The document references a distinct flaw from other known Word vulnerabilities and includes a link to a binary exploit.