CVE-2010-3219

CVE-2010-3219 is the Word Index Parsing Vulnerability in Microsoft Word. It enables remote code execution when parsing a specially crafted Word file, potentially allowing an attacker to take control of the affected system with the caller’s privileges. The MS10-079 security update from Microsoft a...

CVE-2010-3214

The CVE-2010-3214 entry maps to a stack-based buffer overflow in Microsoft Word triggered by parsing specific Word structures (UPX data) in crafted Word documents, enabling remote code execution. Affected products include Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Word for Mac 2004 and 2008; th...

CVE-2010-3218

CVE-2010-3218 is a heap-based buffer overflow in Microsoft Word 2002 SP3 that allows remote code execution when a user opens a specially crafted Word document. Public details in the connected sources confirm a family of Word vulnerabilities addressed by MS10-079, with Word components affected acr...

CVE-2010-3220

CVE-2010-3220 is the Word Parsing Vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac. The issue, a memory corruption/heap overflow in Word’s parsing of crafted Word files, enables remote code execution when a user opens a malicious document. Exploitation requires the user to open a ...

CVE-2010-3215

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."...

CVE-2010-2747

CVE-2010-2747 is a Windows/Office Word remote code execution vulnerability caused by an uninitialized pointer in the Word document parser, leading to memory corruption when processing crafted files. Connected sources confirm multiple affected products across Word/Office on Windows and macOS, incl...

CVE-2010-3217

CVE-2010-3217 is a Microsoft Word 2002 SP3 vulnerability described as a double-free in Word’s LFO (List Format Override) processing that can lead to remote code execution when a crafted Word document is opened. The issue arises from handling certain Word document structures, enabling an attacker ...

CVE-2010-3331

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted,...

CVE-2010-3217

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records, aka "Word Pointer Vulnerability."...

CVE-2010-3219

Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."...

CVE-2010-3216

Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."...

CVE-2010-3214

Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote...

CVE-2010-3221

Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-2747

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."...

CVE-2010-3216

CVE-2010-3216 is the Word Bookmarks Vulnerability in Microsoft Word when parsing a Word file with bookmarks, allowing remote code execution. The initial entry lists affected products as Word 2002 SP3 and Office 2004 for Mac, with memory-corruption via invalid pointers in bookmarks. Microsoft’s MS...

CVE-2010-3218

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

CVE-2010-3221

Microsoft Word Remote Code Execution (CVE-2010-3221) arises from memory corruption when parsing crafted Word documents, allowing remote code execution. Affected products across the Word family include Word 2002 SP3, 2003 SP3, Word Viewer, and Office/Word for Mac variants cited in MS10-079 materia...

CVE-2010-2748

CVE-2010-2748 corresponds to a Word boundary check vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac, where parsing a crafted Word document can trigger memory corruption and allow remote code execution. Connected sources confirm MS10-079 as the corresponding patch/mitigation from M...

CVE-2010-3215

CVE-2010-3215 is a Microsoft Word remote code execution vulnerability caused by improper handling of return values during Word document parsing, leading to memory corruption. A crafted Word file could allow arbitrary code execution on affected systems (Word 2002 SP3 and Office 2004 for Mac are li...

CVE-2010-2750

Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."...