CVE-2008-3007
N/A
N/A
Summary
Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/31067
- http://marc.info/?l=bugtraq&m=122235754013992&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-055
- http://www.insomniasec.com/advisories/ISVA-080910.1.htm
- http://marc.info/?l=bugtraq&m=122235754013992&w=2
- http://www.securitytracker.com/id?1020833
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5970
- http://www.securityfocus.com/archive/1/496178/100/0/threaded
- http://www.vupen.com/english/advisories/2008/2523
- http://www.us-cert.gov/cas/techalerts/TA08-253A.html
References
- http://www.securityfocus.com/bid/31067
- http://marc.info/?l=bugtraq&m=122235754013992&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-055
- http://www.insomniasec.com/advisories/ISVA-080910.1.htm
- http://marc.info/?l=bugtraq&m=122235754013992&w=2
- http://www.securitytracker.com/id?1020833
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5970
- http://www.securityfocus.com/archive/1/496178/100/0/threaded
- http://www.vupen.com/english/advisories/2008/2523
- http://www.us-cert.gov/cas/techalerts/TA08-253A.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.