Memory corruption

Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."...

Memory corruption

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."...

Memory corruption

Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."...

Memory corruption

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."...

Design/Logic Flaw

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."...

Null pointer dereference

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."...

CVE-2010-3221

Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-3237

CVE-2010-3237 is a vulnerability in Microsoft Excel (affecting Excel 2002 SP3 and Office for Mac 2004) where parsing of the Merge Cell record can be exploited to execute arbitrary code. The root cause is improper handling/validation of Merge Cell Records in Excel file formats, enabling remote cod...

CVE-2010-3231

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."...

CVE-2010-3220

Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-3220

CVE-2010-3220 is the Word Parsing Vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac. The issue, a memory corruption/heap overflow in Word’s parsing of crafted Word files, enables remote code execution when a user opens a malicious document. Exploitation requires the user to open a ...

CVE-2010-3215

CVE-2010-3215 is a Microsoft Word remote code execution vulnerability caused by improper handling of return values during Word document parsing, leading to memory corruption. A crafted Word file could allow arbitrary code execution on affected systems (Word 2002 SP3 and Office 2004 for Mac are li...

CVE-2010-2750

CVE-2010-2750 is the Word Index Vulnerability affecting Word 2002 SP3 and Office 2004 for Mac, caused by an array/index handling error that leads to memory corruption and remote code execution when opening a crafted Word file. Microsoft’s MS10-079 security bulletin (and related advisories) addres...

CVE-2010-3221

Microsoft Word Remote Code Execution (CVE-2010-3221) arises from memory corruption when parsing crafted Word documents, allowing remote code execution. Affected products across the Word family include Word 2002 SP3, 2003 SP3, Word Viewer, and Office/Word for Mac variants cited in MS10-079 materia...

CVE-2010-3238

CVE-2010-3238 is a Remote Code Execution in Microsoft Excel via a crafted Excel file that abuses a memory handling error when parsing binary file-format information (Negative Future Function). Affected products include Microsoft Excel 2002 SP3, Excel 2003 SP3, and Office 2004 for Mac. The vulnera...

CVE-2010-2747

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."...

CVE-2010-2748

CVE-2010-2748 corresponds to a Word boundary check vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac, where parsing a crafted Word document can trigger memory corruption and allow remote code execution. Connected sources confirm MS10-079 as the corresponding patch/mitigation from M...

CVE-2010-2747

CVE-2010-2747 is a Windows/Office Word remote code execution vulnerability caused by an uninitialized pointer in the Word document parser, leading to memory corruption when processing crafted files. Connected sources confirm multiple affected products across Word/Office on Windows and macOS, incl...

CVE-2010-2748

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."...

Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...