Detections
Analytics

MS07-014 / MS07-015: Vulnerabilities in Microsoft Word and Office Could Allow Remote Code Execution (929434 / 932554) (Mac OS X)

high Nessus Plugin ID 24328

Synopsis

An application installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities.

Description

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Word or another Office application.

Solution

Microsoft has released a set of patches for Office for Mac OS X.

See Also

http://technet.microsoft.com/en-us/security/bulletin/ms07-014

http://technet.microsoft.com/en-us/security/bulletin/ms07-015

Plugin Details

Severity: High

ID: 24328

File Name: macosx_ms_office_feb2006.nasl

Version: 1.31

Type: local

Agent: macosx

Published: 2/13/2007

Updated: 8/12/2025

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2007-0671

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:office:2004::mac

Required KB Items: Host/MacOSX/packages

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/17/2007

Vulnerability Publication Date: 10/10/2006

CISA Known Exploited Vulnerability Due Dates: 9/2/2025

Exploitable With

Core Impact

Reference Information

CVE: CVE-2006-3877, CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, CVE-2007-0208, CVE-2007-0209, CVE-2007-0515, CVE-2007-0671

BID: 20325, 21451, 21518, 21589, 22225, 22383, 22477, 22482

CWE: 94

MSFT: MS07-014, MS07-015

MSKB: 929434, 932554