MS07-014 / MS07-015: Vulnerabilities in Microsoft Word and Office Could Allow Remote Code Execution (929434 / 932554) (Mac OS X)

High Nessus Plugin ID 24328


An application installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities.


The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Word or another Office application.


Microsoft has released a set of patches for Office for Mac OS X.

See Also

Plugin Details

Severity: High

ID: 24328

File Name: macosx_ms_office_feb2006.nasl

Version: 1.23

Type: local

Agent: macosx

Published: 2007/02/13

Modified: 2017/08/30

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:office:2004::mac

Required KB Items: Host/MacOSX/packages

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2007/02/17

Vulnerability Publication Date: 2006/10/10

Exploitable With

Core Impact

Reference Information

CVE: CVE-2006-3877, CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, CVE-2007-0208, CVE-2007-0209, CVE-2007-0515, CVE-2007-0671

BID: 20325, 21451, 21518, 21589, 22225, 22383, 22477, 22482

OSVDB: 29448, 30824, 30825, 31900, 31901, 33270, 34385, 34386

MSFT: MS07-014, MS07-015

MSKB: 929434, 932554

CWE: 94