Microsoft Office PowerPoint Information Disclosure Vulnerability
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CISA confirmó el 12.08.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 02.09.2025.
Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 ; https://nvd.nist.gov/vuln/detail/CVE-2007-0671
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | access | 2000 | |
| microsoft | excel | 2000 | |
| microsoft | excel viewer | 2003 | |
| microsoft | frontpage | 2000 | |
| microsoft | infopath | 2003 | |
| microsoft | office | 2000 | |
| microsoft | onenote | 2003 | |
| microsoft | outlook | 2000 | |
| microsoft | powerpoint | 2000 | |
| microsoft | project | 2000 | |
| microsoft | publisher | 2000 | |
| microsoft | visio | 2002 | |
| microsoft | word | 2000 | |
| microsoft | word viewer | 2003 |
cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:access:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:access:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.