Lucene search
+L

59 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/11 12:00 a.m.•3 views

CVE-2006-6456: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994...

9.3CVSS6.2AI score0.32163EPSS
SaveExploits0References1
NVD
NVD
•added 2006/10/10 10:07 p.m.•33 views

CVE-2006-3651

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

9.3CVSS7.2AI score0.30904EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/10 12:00 a.m.•5 views

CVE-2006-3651: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

9.3CVSS6.5AI score0.30904EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2006/10/10 12:00 a.m.•13 views

VulnCheck KEV: CVE-2006-4534

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

9.3CVSS6.2AI score0.34495EPSS
SaveIn wildExploits0References2
CERT
CERT
•added 2006/09/07 12:00 a.m.•44 views

Microsoft Word 2000 malformed record vulnerability

Overview Microsoft Word 2000 contains a memory corruption vulnerability. This vulnerability could allow a remote, unauthenticated attacker to execute arbitrary code with the privileges of the user running Word 2000. Description Microsoft Word 2000 fails to properly handle malformed records leadin...

9.3CVSS7.1AI score0.34495EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2006/09/05 5:00 p.m.•41 views

CVE-2006-4534

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

7.4AI score0.34495EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/05 12:00 a.m.•6 views

CVE-2006-4534: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

9.3CVSS6.5AI score0.34495EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/09/05 12:00 a.m.•45 views

Microsoft Word 2000 unknown vulnerability

Unknown security vulnerability is used hor hidden malware installation...

1.6AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2006/07/12 12:00 a.m.•57 views

msword-hlink-ohday.txt

Hi people, the same problem concerning hlink.dll already exploited in excel is present even in Microsoft Word, but Word 2003 seems, luckily, not vulnerable. this one is the public 0-day I made for Microsoft Word. the author is "SYS 49152" obviusly it's a local sploit .. best regards. SYS 49152...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/07/09 12:00 a.m.•89 views

Microsoft Word 2000/2003 - Hlink Local Buffer Overflow

!/bin/perl Microsoft Word hlink 0-day by SYS 49152 this POC works only with: win 2ksp4 ENG + word 2000/XP all versions. win XP ENG sp1/sp2 + word XP 2002 SP3. Word 2003 is not vulnerable. bindshell on port 49152 hey kids.. I hope you know how to use winzip :- to get in contact with me...

5.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/08/21 4:00 a.m.•52 views

CVE-2004-2482

Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property ...

7.3AI score0.12761EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/21 12:00 a.m.•3 views

CVE-2004-2482: Undefined Security Weakness

Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property ...

5CVSS6.6AI score0.12761EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2005/07/12 4:00 a.m.•52 views

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

7.9AI score0.25652EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/13 12:00 a.m.•6 views

CVE-2005-0558: Undefined Security Weakness

Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document...

5.1CVSS6.5AI score0.15219EPSS
SaveExploits0References1
Symantec
Symantec
•added 2005/04/12 12:00 a.m.•34 views

Microsoft Word Unspecified Document File Buffer Overflow Vulnerability

Description Microsoft Word is affected by a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data. Microsoft has not specified exactly where the error may occur. This could result in execution of arbitrary code in the...

8.1AI score
SaveExploits0References1Affected Software2
Symantec
Symantec
•added 2005/04/12 12:00 a.m.•29 views

Microsoft Word Malformed Document Buffer Overflow Vulnerability

Description Microsoft Word is prone to a buffer overflow vulnerability. This issue presents itself when Microsoft Word attempts to parse a malformed document. This could result in execution of arbitrary code in the context of a user who opens the malicious document. Internet Explorer is a likely...

8.1AI score
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2002/03/09 5:00 a.m.•54 views

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

7AI score0.02244EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•7 views

CVE-2001-0628: Undefined Security Weakness

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

7.2CVSS6.3AI score0.02244EPSS
SaveExploits1References1
NVD
NVD
•added 2001/08/14 4:00 a.m.•25 views

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

7.2CVSS7AI score0.02244EPSS
SaveExploits1References3
Rows per page
Query Builder