| Patch Name : |
office2007-kb951944-fullfile-x86-glb.exe |
| Patch Description : |
Security Update for the 2007 Microsoft Office System (KB951944) |
| Bulletin Id : |
MS08-055 |
| Bulletin Title : |
Vulnerability in Microsoft Office Could Allow Remote Code Execution (955047) |
| KnowledgeBase : | 951944 |
| Severity : |
Important |
| Location Path : | office2007-kb951944-fullfile-x86-glb.exe |
| Bulletin Summary: |
This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user clicks a specially crafted OneNote URL. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. This security update addresses the vulnerability by modifying the way that Microsoft Office validates uniform resource locators. |
| Superceding Bulletin Id : |
None |
| Patch Release Date : |
Sep 9, 2008 |
| CVE Id : | CVE-2008-3007 |
| Affected Product Information |
|
| Product Name |
Service Pack Name |
| Office 2007 | Office 2007 Gold |
| Compatibility Pack for Office 2007 | Office Compatibility Pack Gold |
| MS Excel Viewer | Excel Viewer Gold |
|
| File changes |
|
| File Path |
Version |
| %commonfiles%\Microsoft Shared\Office12\Mso.dll | 12.0.6320.5000 |
|
| Registry changes |
|
| Registry Path |
Key Name |
Key Value |
| No records found | | |
