Design/Logic Flaw

Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 aka Lotus 1-2-3 workbook file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."...

Memory corruption

Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."...

Null pointer dereference

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."...

Heap overflow

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

Double free

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records, aka "Word Pointer Vulnerability."...

CVE-2010-3219

Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."...

CVE-2010-3231

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."...

CVE-2010-3219

CVE-2010-3219 is the Word Index Parsing Vulnerability in Microsoft Word. It enables remote code execution when parsing a specially crafted Word file, potentially allowing an attacker to take control of the affected system with the caller’s privileges. The MS10-079 security update from Microsoft a...

CVE-2010-3218

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

CVE-2010-3234

Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."...

CVE-2010-3234

The CVE-2010-3234 vulnerability is a Formula Substream Memory Corruption flaw in Microsoft Office Excel. It arises when Excel parses Formula Substream records, leading to a memory corruption condition that could allow a remote attacker to execute arbitrary code by convincing a user to open a spec...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. OpenVAS Vulnerability Test $Id: secpodms10-079.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Word Remote Code Execution Vulnerabilities 2293194 Authors: Antu Sanadi Copyright: Copyright c 2010...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)

This host is missing a critical security update according to Microsoft Bulletin MS10-080. OpenVAS Vulnerability Test $Id: secpodms10-080.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2293211 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

PT-2010-4263

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2002 SP3 Office 2004 for Mac Description A remote code execution issue exists due to an improper boundary check when parsing a specially crafted Word file. This allows attackers to execute arbitrary code, potentially...

PT-2010-4670

Name of the Vulnerable Software and Affected Versions Microsoft Excel version 2002 SP3 Description A remote code execution issue exists due to improper validation of formula information in Microsoft Excel, allowing attackers to execute arbitrary code via a crafted Excel document. This vulnerabili...

CVE-2010-2750: Improper Control of Generation of Code

Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."...

CVE-2010-3230: Undefined Security Weakness

Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."...

CVE-2010-3231: Improper Input Validation

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."...

CVE-2010-3218: Improper Control of Generation of Code

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

CVE-2010-2747: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."...