CVE-2014-2778

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a 1 .doc or 2 .docx document, aka "Embedded Font Vulnerability."...

CVE-2014-2778: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted embedded font in a 1 .doc or 2 .docx document, aka "Embedded Font Vulnerability."...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerability (2969261)

This host is missing an important security update according to Microsoft Bulletin MS14-034. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word File Processing CVE-2014-2778 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

PT-2014-1208

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 Office Compatibility Pack version SP3 Description The issue is related to errors that occur when processing specially crafted files, allowing a remote attacker to execute arbitrary code and gain full control ov...

KLA10012 Vulnerability in Microsoft Word 2007 & Office Compatibility Pack

An unspecified vulnerability was found in the Word 2007 and Office Compatibility Pack. By exploiting this vulnerability malicious users can execute arbitrary code or cause a denial of service. This vulnerability can be exploited from the network at point related to an unknown application via a...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)

This host is missing a critical security update according to Microsoft Bulletin MS14-017. OpenVAS Vulnerability Test $Id: gbmscompatpackms14-017.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities 2949660 Authors: Antu Sanadi Copyright...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)

This host is missing a critical security update according to Microsoft Bulletin MS14-017. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2014-1000

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 through 2010 SP2 Office Compatibility Pack version SP3 Description The issue arises from incorrect memory allocation during file conversions from a binary format to a newer format, allowing remote attackers to...

Microsoft Word File Converting CVE-2014-1757 Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

CVE-2014-1757: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary aka .doc format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office File Format...

CVE-2014-1761

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attacker...

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

CVE-2014-0259

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

Memory corruption

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

CVE-2014-0260

CVE-2014-0260 affects Microsoft Word and related Office components (Word Viewer, Office Web Apps, SharePoint, etc.). The issue arises from memory corruption while parsing crafted Office documents, enabling remote code execution or, per source, possible denial of service. The vulnerability is mapp...

CVE-2014-0259

CVE-2014-0259 : Word Memory Corruption Vulnerability affecting Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 via crafted Office documents. Root cause is memory corruption when parsing crafted files, enabling remote code execution and potential DoS. Affected products/themes align with ...

CVE-2014-0259

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

CVE-2014-0259: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...