« Volver al listado

CVE-2007-6329

Estado: ModificadaMedia (6.4)—

Microsoft Office 2007 12.0.6015.5000 y MSO 12.0.6017.5000 no firma la meta-información de documentos Office Open XML (OOXML), lo cual hace más fácil para atacantes remotos modificar campos de meta-datos Dublin Core, como ha sido demostrado por los campos (1) LastModifiedBy y (2) creator en docProps/core.xml en el contenedor OOXML ZIP.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Office

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-6329",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-12-13T19:46:00.000",
  "references": [
    {
      "url": "http://osvdb.org/44938",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3443",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/484919/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26833",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39021",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/44938",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3443",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/484919/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26833",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39021",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container."
    },
    {
      "lang": "es",
      "value": "Microsoft Office 2007 12.0.6015.5000 y MSO 12.0.6017.5000 no firma la meta-información de documentos Office Open XML (OOXML), lo cual hace más fácil para atacantes remotos modificar campos de meta-datos Dublin Core, como ha sido demostrado por los campos (1) LastModifiedBy y (2) creator en docProps/core.xml en el contenedor OOXML ZIP."
    }
  ],
  "lastModified": "2026-06-16T22:47:50.427",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:office:2007:12.0.6015.5000:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E559EBC5-8742-4EFF-B799-CA2F4535259C"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2007:12.0.6017.5000:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56D9FC39-60EA-45AD-A5B4-F767BCEBE391"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}