Microsoft Works File Converter FontName buffer overflow

Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...

Microsoft Security Bulletin MS09-024 - Critical Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632)

Microsoft Security Bulletin MS09-024 - Critical Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution 957632 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Microsoft Works...

Security Update for Microsoft Word 2002 (KB969602)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves the vulnerability so that Microsoft Word 2002 documents are handled appropriately...

Microsoft Word Record Parsing Length Field Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected...

Microsoft写字板和Office文本转换器内存破坏漏洞（MS09-010）

BUGTRAQ ID: 29769 CVECAN ID: CVE-2009-0087 写字板是Windows操作系统中附件所提供的简单文本编辑工具。 如果用户打开了包含有畸形数据的特制Word 6文件的话，写字板和Microsoft Office中的内存破坏漏洞可能导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows 2000SP4 Microsoft...

CVE-2009-0087: Undefined Security Weakness

Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file...

Memory corruption

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac...

Memory corruption

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control...

CVE-2008-4030: Undefined Security Weakness

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control...

CVE-2008-4024: Improper Control of Generation of Code

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block FIB, which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory...

Security Update for Microsoft Word 2002 (KB956329)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Word Could Allow Remote Code Execution Vulnerability

This host is installed with Microsoft Office with MS Word, which is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodmswordcodeexecvuln900006.nasl 6519 2017-07-04 14:08:14Z cfischer $ Description: Microsoft Word Could Allow Remote Code Execution Vulnerability...

Security Update for Microsoft Word 2002 (KB954463)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048)

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution 955048 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in Microsoft Word. This...

Design/Logic Flaw

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

CVE-2008-2244

A memory corruption vulnerability exists in Microsoft Word (specifically versions 2002 SP3, 2003 SP2, and 2003 SP3) due to improper handling of malformed SmartTag record values . A remote attacker can exploit this by tricking a user into opening a specially crafted .doc file, which could lead to ...

VulnCheck KEV: CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

CVE-2008-2244: Undefined Security Weakness

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

Microsoft Word Malformed Record Value Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Successful attacks may allow arbitrary malicious code to run in the context of the user running the application. Failed attack attempts may result in a crash. Reports indicate that this issue affects Microsoft Office XP...