CVE-2007-6329 | BDVDB-2026-28177 Detail

Description#

Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/3443
https://exchange.xforce.ibmcloud.com/vulnerabilities/39021
http://www.securityfocus.com/bid/26833
http://www.securityfocus.com/archive/1/484919/100/0/threaded
http://osvdb.org/44938

Exploit#

No public exploit known

History#

Version 12007-12-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.