Lucene search
K

26 matches found

Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.8 views

PT-2026-40191

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00042EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/17 12:0 a.m.2 views

PT-2023-8270 · Hancom · Hancom Office Word

Name of the Vulnerable Software and Affected Versions: Hancom Office Word affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Hancom Office Word. It requires user interaction, such as visiting a malicious page or...

8.8CVSS7.4AI score0.00649EPSS
Exploits0References8
HackRead
HackRead
added 2023/08/31 11:34 a.m.15 views

MalDoc in PDF Attack: Hackers Hiding Malicious Word Files within PDFs

By Habiba Rashid Dubbed MalDoc in PDF attack by researchers, the new attack trend utilizes PDF and Word files to spread malware. This is a post from HackRead.com Read the original post: MalDoc in PDF Attack: Hackers Hiding Malicious Word Files within PDFs...

6.9AI score
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/13 4:8 a.m.65 views

MS15-022: Description of the security update for SharePoint Server 2013 Word Automation Services: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...

0.7AI score
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/13 4:8 a.m.12 views

MS14-081: Description of the security update for Word 2013: December 9, 2014

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...

0.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/06/30 12:0 a.m.80 views

Symantec Messaging Gateway 10.x < 10.6.3-266 Multiple Vulnerabilities (SYM17-004)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.6.3-266. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when handling email attachments involving malformed o...

10CVSS8.2AI score0.79143EPSS
Exploits5References4
Cvelist
Cvelist
added 2017/06/26 9:0 p.m.20 views

CVE-2017-6324

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality residen...

8.4AI score0.00453EPSS
Exploits0References3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26468/info Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. Remote attackers can exploit this issue to execute arbitrary machine code ...

7.1AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2014/03/03 12:0 a.m.1 views

Microsoft Word PlfLfo Structure Memory Corruption (MS08-072) - Ver2 (CVE-2008-4024)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory corruption error in Microsoft Word that fails to properly handle specially crafted Word files. A remote attacker could trigger th...

9.3CVSS7.3AI score0.57487EPSS
Exploits0
OpenVAS
OpenVAS
added 2012/11/15 12:0 a.m.11 views

Fedora Update for catdoc FEDORA-2012-17588

Check for the Version of catdoc OpenVAS Vulnerability Test Fedora Update for catdoc FEDORA-2012-17588 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.4AI score
Exploits0References2
Fedora
Fedora
added 2012/11/13 1:1 a.m.11 views

[SECURITY] Fedora 17 Update: catdoc-0.94.2-10.fc17

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

0.5AI score
Exploits0
securityvulns
securityvulns
added 2012/10/09 12:0 a.m.23 views

Microsoft Works memory corruption

Memory corruption on Word files parsing...

9.3CVSS3.6AI score0.66728EPSS
Exploits0Affected Software1
securityvulns
securityvulns
added 2011/07/26 12:0 a.m.48 views

Apple iWork multiple security vulnerabilities

Memory corruptions on Word and Excel files processing...

6.8CVSS2AI score0.06133EPSS
Exploits5References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2010/10/12 12:0 a.m.1 views

Microsoft Word Bookmarks Bounds Checking Code Execution (MS10-079; CVE-2010-3216)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in the way that Microsoft Word handles bookmarks inside a specially crafted Word file. The vulnerability is due to an error in Microsoft Word that fails to properly parse specially...

9.3CVSS7.1AI score0.57317EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2010/06/03 12:0 a.m.1 views

OpenOffice.org Microsoft Word File Processing Integer Underflow (CVE-2009-3301; CVE-2009-3302)

OpenOffice.org is an open source office suite that includes a word processor, a spreadsheet application, a presentation creator, an illustration drawer, a desktop database, and an equation editor. The product is made available for multiple platforms and languages. An integer underflow vulnerabili...

9.3CVSS7AI score0.42759EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2009/06/10 12:0 a.m.2 views

PT-2009-3212 · Microsoft · Office For Mac +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word versions 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 Microsoft Office for Mac versions 2004 and 2008 Open XML File Format Converter for Mac affected versions not specified Microsoft Office Word Viewer version 2003 SP3...

9.3CVSS8.3AI score0.79917EPSS
Exploits1References16
ATTACKERKB
ATTACKERKB
added 2009/01/22 11:30 p.m.3 views

CVE-2009-0259

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated ...

9.3CVSS6.1AI score0.7455EPSS
Exploits7References6
VulnCheck KEV
VulnCheck KEV
added 2009/01/21 12:0 a.m.1 views

VulnCheck KEV: CVE-2009-0259

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as...

9.3CVSS6.2AI score0.166EPSS
Exploits6References1
Check Point Advisories
Check Point Advisories
added 2008/12/09 12:0 a.m.3 views

Microsoft Word Global Array Index Heap Overflow (MS08-072; CVE-2008-4026)

Microsoft Word is a popular word processing software A remote code execution vulnerability has been identified in Microsoft Word.The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could exploit this issue via a malformed Word file...

9.3CVSS7.2AI score0.57941EPSS
Exploits0
Rows per page
Query Builder