CVE-2013-3891

CVE-2013-3891 is a memory corruption vulnerability in Microsoft Word 2003 SP3 that enables remote code execution via a crafted Office document. The issue affects Word/Office parsing logic and leads to arbitrary code execution on vulnerable systems. Public documents corroborate the vulnerability a...

CVE-2013-3891

Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability."...

CVE-2013-3892

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability."...

CVE-2013-3892

CVE-2013-3892 affects Microsoft Word 2007 SP3 and Office Compatibility Pack SP3, where parsing crafted Office documents can lead to remote code execution. The underlying issue is memory corruption during document processing, enabling an attacker to run arbitrary code with the user’s privileges. T...

Microsoft Office Word Remote Code Execution Vulnerabilities (2885084)

This host is missing an important security update according to Microsoft Bulletin MS13-086. OpenVAS Vulnerability Test $Id: secpodmswinwordms13-086.nasl 6125 2017-05-15 09:03:42Z teissa $ Microsoft Office Word Remote Code Execution Vulnerabilities 2885084 Authors: Antu Sanadi Copyright: Copyright...

MS13-086: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084)

The remote Windows host is running a version of Microsoft Office or Microsoft Office Compatibility Pack that is affected by multiple remote code execution vulnerabilities. The vulnerabilities exist in the way that Microsoft Word parses specially crafted files. An attacker who successfully exploit...

Microsoft Office multiple security vulnerabilities

Memory corruptions on Word and Excel documents parsing...

Microsoft Office Word Remote Code Execution Vulnerabilities (2885084)

This host is missing an important security update according to Microsoft Bulletin MS13-086. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Remote Code Execution Vulnerabilities (2885080)

This host is missing an important security update according to Microsoft Bulletin MS13-085. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Services Remote Code Execution vulnerability (2885089)

This host is missing an important security update according to Microsoft Bulletin MS13-084. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Security Update for Word 2003 (KB2826020)

A security vulnerability exists in Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

MS13-084: Description of the security update for Word Automation Services in SharePoint Server 2010: October 8, 2013

Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...

Microsoft Word CVE-2013-3892 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Microsoft Word CVE-2013-3891 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

MS13-084: Description of the security update for Word Online: October 8, 2013

This security update addresses the vulnerabilities by correcting how affected Microsoft software validates data when parsing specially crafted Office files and by changing configuration of SharePoint pages to help provide additional protection against clickjacking attacks.INTRODUCTIONMicrosoft ha...

Microsoft Word File Parsing Memory Corruption (MS13-086; CVE-2013-3891)

A remote code execution vulnerability exists in Microsoft Word...

Resource file path traversal in IconDownloadResourceManager

To reproduce: 1. Create a new page title doesn't matter. 2. Insert an image with URL: code:none /confluence/images/icons/profilepics/../../../WEB-INF/classes/crowd.properties code with /confluence/ replaced with the correct base path. Edit the page, click +, click Image, select the From the Web...

Resource file path traversal in IconDownloadResourceManager

To reproduce: 1. Create a new page title doesn't matter. 2. Insert an image with URL: code:none /confluence/images/icons/profilepics/../../../WEB-INF/classes/crowd.properties code with /confluence/ replaced with the correct base path. Edit the page, click +, click Image, select the From the Web...

Microsoft Word远程内存破坏漏洞(CVE-2013-3858)(MS13-072)

BUGTRAQ ID: 62226 CVECAN ID: CVE-2013-3858 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序。 受影响的 Microsoft Office 软件分析特制文件的方式中存在远程执行代码漏洞。成功利用这些漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 0 Microsoft Office 2010 Microsoft Office 2007 Microsoft Office 2003 临时解决方法： 安装和配置 MOICE 以 成为 .doc...

Microsoft Word XML文件处理信息泄露漏洞(CVE-2013-3160)(MS13-072)

BUGTRAQ ID: 62162 CVECAN ID: CVE-2013-3160 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序 Microsoft Word 分析包含外部实体的特制 XML 文件的方式中存在一个信息泄露漏洞。处理XML数据时出错，通过发送包含外部实体引用的特制XML数据，攻击者可获取本地文件内容 0 Microsoft Office 2010 Microsoft Office 2007 Microsoft Office 2003 临时解决方法： 安装和配置 MOICE 以 成为 .doc 文件的注册处理程序 使用 Microsoft...