CVE ID:	CVE-2008-3007
Description:	Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
Test IDs:	1.3.6.1.4.1.25623.1.0.900046
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3007 BugTraq ID: 31067 http://www.securityfocus.com/bid/31067 Bugtraq: 20080909 Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability (Google Search) http://www.securityfocus.com/archive/1/496178/100/0/threaded Cert/CC Advisory: TA08-253A http://www.us-cert.gov/cas/techalerts/TA08-253A.html HPdes Security Advisory: HPSBST02372 http://marc.info/?l=bugtraq&m=122235754013992&w=2 HPdes Security Advisory: SSRT080133 http://marc.info/?l=bugtraq&m=122235754013992&w=2 http://www.insomniasec.com/advisories/ISVA-080910.1.htm Microsoft Security Bulletin: MS08-055 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5970 http://www.securitytracker.com/id?1020833 http://www.vupen.com/english/advisories/2008/2523