CVE-2008-6063: Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject f...

Security readout for executives and security teams

This is an information disclosure issue in Microsoft Word 2007 with the “Save as PDF” add-on enabled. Using “Email as PDF” can put a local absolute file path into the email Subject field, exposing details such as the sender’s account name and Temporary Internet Files path. Exposure appears limited to environments still using Microsoft Word 2007 with the “Save as PDF” add-on enabled and the “Email as PDF” operation. The bundle does not identify other affected versions or products. Treat this as low urgency unless legacy Office workflows are still in use for sensitive communications. The main risk is privacy and internal environment disclosure, not system compromise. Mitigation focus: Check Microsoft or vendor guidance for any official update or replacement workflow.; Avoid using Word 2007 “Email as PDF” until the behavior is reviewed.; Manually inspect and sanitize email Subject fields before sending PDFs..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.