67 matches found
Microsoft Word mso.dll LsCreateLine Memory Corruption (CVE-2006-3493)
Microsoft Word is a popular word processing software. A memory corruption vulnerability has been reported in the dynamically-linked library mso.dll which is shipped with Microsoft Word. The vulnerability is due to improper check when processing data in Microsoft Word documents. A remote attacker...
Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
This host is installed with Microsoft Word and is prone to null pointer dereference vulnerability. OpenVAS Vulnerability Test $Id: secpodmsofficewordnullpntrdosvuln.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability Authors: Antu Sanadi...
Microsoft Word 2003 'MSO.dll' Null Pointer Dereference Vulnerability
Microsoft Word is prone to null pointer dereference vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3200
Microsoft Word 2003 SP3 (MSO.dll) is affected by CVE-2010-3200 due to a null pointer dereference triggered by a crafted Word document, leading to a denial-of-service condition (multiple Word process crashes) as demonstrated by word_crash_11.8326.8324_poc.doc. Affected component is MSO.dll within ...
CVE-2010-3200: Undefined Security Weakness
MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service NULL pointer dereference and multiple-instance application crash via a crafted buffer in a Word document, as demonstrated by wordcrash11.8326.8324poc.doc...
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse 1 mso.dll or 2 GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard .vcg or Groove Tool Archive .gta...
CVE-2010-3146
CVE-2010-3146 corresponds to the Microsoft Groove 2007 insecure library loading vulnerability. Multiple OpenVAS/SecPod/SAINT entries confirm that Groove 2007 (SP2) loads untrusted libraries from the current working directory when opening .vcg or .gta files, specifically mso.dll or GroovePerfmon.d...
CVE-2010-3146
Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse 1 mso.dll or 2 GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard .vcg or Groove Tool Archive .gta...
CVE-2010-3146: Undefined Security Weakness
Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse 1 mso.dll or 2 GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard .vcg or Groove Tool Archive .gta...
CVE-2010-0243
Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."...
Buffer overflow
Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."...
CVE-2010-0243
The CVE-2010-0243 issue is a remote code execution vulnerability in MSO.DLL affecting Microsoft Office XP SP3 and Microsoft Office 2004 for Mac, caused by a memory corruption/buffer overflow when loading specially crafted Office files (OfficeArtSpgr containers). The OpenVAS/Core advisories confir...
CVE-2010-0243
Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."...
Microsoft Office (MSO) Remote Code Execution Vulnerability (978214)
This host is missing a critical security update according to Microsoft Bulletin MS10-003. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office (MSO) Remote Code Execution Vulnerability (978214)
This host is missing a critical security update according to Microsoft Bulletin MS10-003. OpenVAS Vulnerability Test $Id: secpodms10-003.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office MSO Remote Code Execution Vulnerability 978214 Authors: Veerendra GG Copyright: Copyright c 2010...
CVE-2010-0243: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."...
Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability
Advisory ID Internal CORE-2009-0827 1. Advisory Information Title: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability Advisory Id: CORE-2009-0827 Date published: 2010-02-09 Date of last update: 2010-02-08 Vendors contacted: Microsoft Release mode: Coordinated...
Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
No description provided by source. /------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll...
CVE-2007-1747
CVE-2007-1747 concerns a remote code execution in Microsoft Office via a malformed drawing object parsed by MSO.dll. The vulnerability affects multiple Office versions across platforms: Office 2000 SP3, Office 2002 SP3, Office 2003 SP2, Office 2004 for Mac, and Office 2007, where parsing a specia...
CVE-2007-1747: Undefined Security Weakness
Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a malformed drawing object, which triggers memory corruption...