5698 matches found
Microsoft Word Record RTF Parsing Engine Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word 'sprmCMajority' Record Parsing Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word sprmCMajority Record Parsing Remote Code Execution (MS10-056; CVE-2010-1900)
A remote code execution vulnerability exists in the way that Microsoft Office Word handles malformed records inside of a specially crafted Word file. Exploitation of this vulnerability requires that a user open a specially crafted Word file with an affected version of Microsoft Office Word. An...
Microsoft Word Record RTF Parsing Engine Remote Heap Buffer Overflow Vulnerability
Description Microsoft Word is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...
Microsoft Word HTML Linked Object Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability because it fails to properly allocate heap-based memory. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...
Microsoft Word HTML Linked Objects Memory Corruption (MS10-056; CVE-2010-1903)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly parse specially crafted Word files. A remote attacker could trigger this flaw by...
Microsoft Word RTF Data Parsing Buffer Overflow (MS10-056; CVE-2010-1902)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...
Microsoft Word RTF Parsing Engine Memory Corruption (MS10-056; CVE-2010-1901)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...
openoffice.org -- Multiple vulnerabilities
OpenOffice.org Security Team reports: Fixed in OpenOffice.org 3.3 CVE-2010-2935 / CVE-2010-2936: Security Vulnerability in OpenOffice.org related to PowerPoint document processing CVE-2010-3450: Security Vulnerability in OpenOffice.org related to Extensions and filter package files CVE-2010-3451 ...
IBM Lotus Notes DOC Attachment Viewer Buffer Overflow (CVE-2007-5544)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP, and IMAP. A stack buffer overflow vulnerability exists in the way IBM Lotu...
Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:035)
This updates provides a new OpenOffice.org version 3.1.1. It holds security and bug fixes described as follow : An integer underflow might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow...
Corel WordPerfect Office X5 15.0.0.357 Buffer Overflow
/ - Title: Corel WordPerfect Office X5 15.0.0.357 wpd Remote Buffer Preoccupation PoC - Vendor: Corel Corporation - Product Web Page: http://www.corel.com - Version Tested: 15.0.0.357 Standard Edition - Summary: Corel® WordPerfect® Office X5 Standard Edition is the essential office suite for wo...
Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow (PoC)
Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow PoC / - Title: Corel WordPerfect Office X5 15.0.0.357 wpd Remote Buffer Preoccupation PoC - Vendor: Corel Corporation - Product Web Page: http://www.corel.com - Version Tested: 15.0.0.357 Standard Edition - Summary: Corel® WordPerfect®...
Microsoft Word Array Data Handling Buffer Overflow (MS07-024; CVE-2007-0035)
A buffer overflow vulnerability exists in the way Microsoft Word processes word documents. The vulnerability is the result of an infinite loop. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted Word document, potentially causing arbitrary code to be...
Microsoft Word Font Parsing Buffer Overflow (CVE-2005-0564)
Microsoft Word is a document authoring product released by the Microsoft Corporation. Its native file format is the Word Document. A Word Document has numerous properties which define the appearance of the document, text alignment, pictures and text font. The names of the fonts used in the docume...
Security Update for Microsoft Office Word 2003 (KB982134)
A security vulnerability exists in Microsoft Office Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Windows COM Object Validation Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Excel, PowerPoint, Publisher, Visio, Wordpad, or Word file. Successful exploits would allow the attacker to execute arbitrary code in the...
OpenOffice.org Microsoft Word File Processing Integer Underflow (CVE-2009-3301; CVE-2009-3302)
OpenOffice.org is an open source office suite that includes a word processor, a spreadsheet application, a presentation creator, an illustration drawer, a desktop database, and an equation editor. The product is made available for multiple platforms and languages. An integer underflow vulnerabili...
JVN#17293765 Ichitaro series vulnerable to arbitrary code execution
The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. Impact When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code. Solution Update the software...
CVE-2010-2002
Cross-site scripting XSS vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with "administer words filtered" privileges, to inject arbitrary web script or HTML via the word list...