GCVE - cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*

part: a version: 2006 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Works (`bc0da53a-a881-5de8-9cc0-38c7a6db0134`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1202`	vulnerable	2026-06-08 04:49:41.647238	Details available Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability." Published: 2007-05-08T23:00:00.000Z Updated: 2024-08-07T12:50:34.731Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/468871/100/200/threaded http://www.securitytracker.com/id?1018013 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525 http://www.securityfocus.com/archive/1/468871/100/200/threaded http://www.vupen.com/english/advisories/2007/1709	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0515`	vulnerable	2026-06-08 04:49:32.689651	Details available Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561. Published: 2007-01-26T00:00:00.000Z Updated: 2024-08-07T12:19:30.310Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528 http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html http://isc.sans.org/diary.html?storyid=2133 http://www.securityfocus.com/bid/22225 http://osvdb.org/31900	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0209`	vulnerable	2026-06-08 04:49:31.688788	Details available Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption. Published: 2007-02-13T21:00:00.000Z Updated: 2024-08-07T12:12:18.000Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/22482 http://www.securitytracker.com/id?1017639 http://www.vupen.com/english/advisories/2007/0583 http://osvdb.org/34386 http://www.us-cert.gov/cas/techalerts/TA07-044A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0208`	vulnerable	2026-06-08 04:49:31.688318	Details available Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code. Published: 2007-02-13T21:00:00.000Z Updated: 2024-08-07T12:12:17.101Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1017639 http://www.vupen.com/english/advisories/2007/0583 http://www.osvdb.org/34385 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A700 http://www.us-cert.gov/cas/techalerts/TA07-044A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0035`	vulnerable	2026-06-08 04:49:31.225341	Details available Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability." Published: 2007-05-08T22:00:00.000Z Updated: 2024-08-07T12:03:37.028Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/468871/100/200/threaded http://www.securityfocus.com/bid/23804 http://www.securitytracker.com/id?1018013 http://www.securityfocus.com/archive/1/468871/100/200/threaded http://www.vupen.com/english/advisories/2007/1709	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6561`	vulnerable	2026-06-08 04:49:29.217310	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6456`	vulnerable	2026-06-08 04:49:28.914647	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5994`	vulnerable	2026-06-08 04:49:21.786820	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0009`	vulnerable	2026-06-08 04:48:45.635686	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.