Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*

part: a version: 2007 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductOffice (500dd0f0-abf7-5a48-83ed-09faf7777559)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0851 vulnerable 2026-06-08 05:10:24.938998 Details available
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
Published: 2018-02-15T02:00:00.000Z
Updated: 2024-09-16T22:51:16.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5672 vulnerable 2026-06-08 05:02:58.000863 Details available
Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
Published: 2012-10-25T10:00:00.000Z
Updated: 2024-09-16T21:56:53.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3068 vulnerable 2026-06-08 04:50:32.937903 Details available
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
Published: 2008-07-07T23:00:00.000Z
Updated: 2024-08-07T09:21:34.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3003 vulnerable 2026-06-08 04:50:32.796812 Details available
Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."
Published: 2008-08-12T23:00:00.000Z
Updated: 2024-08-07T09:21:34.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1898 vulnerable 2026-06-08 04:50:22.247752 Details available
A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.
Published: 2008-04-21T17:00:00.000Z
Updated: 2024-08-07T08:40:59.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1455 vulnerable 2026-06-08 04:50:20.576546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1434 vulnerable 2026-06-08 04:50:20.506148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1091 vulnerable 2026-06-08 04:50:18.871237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1090 vulnerable 2026-06-08 04:50:18.868046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1089 vulnerable 2026-06-08 04:50:18.863211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0119 vulnerable 2026-06-08 04:50:10.288944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0117 vulnerable 2026-06-08 04:50:10.287940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0111 vulnerable 2026-06-08 04:50:10.279694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0110 vulnerable 2026-06-08 04:50:10.277907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2223 not_vulnerable 2026-06-08 04:49:44.363508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1756 vulnerable 2026-06-08 04:49:43.374139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1747 vulnerable 2026-06-08 04:49:43.359039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0215 vulnerable 2026-06-08 04:49:31.698302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.