Memory corruption

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."...

Heap overflow

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

CVE-2010-3215

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."...

CVE-2010-3221

Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-3214

The CVE-2010-3214 entry maps to a stack-based buffer overflow in Microsoft Word triggered by parsing specific Word structures (UPX data) in crafted Word documents, enabling remote code execution. Affected products include Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Word for Mac 2004 and 2008; th...

CVE-2010-3217

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records, aka "Word Pointer Vulnerability."...

CVE-2010-3214

Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote...

CVE-2010-3216

Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."...

CVE-2010-3221

Microsoft Word Remote Code Execution (CVE-2010-3221) arises from memory corruption when parsing crafted Word documents, allowing remote code execution. Affected products across the Word family include Word 2002 SP3, 2003 SP3, Word Viewer, and Office/Word for Mac variants cited in MS10-079 materia...

CVE-2010-3216

CVE-2010-3216 is the Word Bookmarks Vulnerability in Microsoft Word when parsing a Word file with bookmarks, allowing remote code execution. The initial entry lists affected products as Word 2002 SP3 and Office 2004 for Mac, with memory-corruption via invalid pointers in bookmarks. Microsoft’s MS...

CVE-2010-3220

Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-3220

CVE-2010-3220 is the Word Parsing Vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac. The issue, a memory corruption/heap overflow in Word’s parsing of crafted Word files, enables remote code execution when a user opens a malicious document. Exploitation requires the user to open a ...

CVE-2010-3215

CVE-2010-3215 is a Microsoft Word remote code execution vulnerability caused by improper handling of return values during Word document parsing, leading to memory corruption. A crafted Word file could allow arbitrary code execution on affected systems (Word 2002 SP3 and Office 2004 for Mac are li...

CVE-2010-3219

CVE-2010-3219 is the Word Index Parsing Vulnerability in Microsoft Word. It enables remote code execution when parsing a specially crafted Word file, potentially allowing an attacker to take control of the affected system with the caller’s privileges. The MS10-079 security update from Microsoft a...

CVE-2010-2750

CVE-2010-2750 is the Word Index Vulnerability affecting Word 2002 SP3 and Office 2004 for Mac, caused by an array/index handling error that leads to memory corruption and remote code execution when opening a crafted Word file. Microsoft’s MS10-079 security bulletin (and related advisories) addres...

CVE-2010-3218

CVE-2010-3218 is a heap-based buffer overflow in Microsoft Word 2002 SP3 that allows remote code execution when a user opens a specially crafted Word document. Public details in the connected sources confirm a family of Word vulnerabilities addressed by MS10-079, with Word components affected acr...

CVE-2010-2750

Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."...

CVE-2010-3219

Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."...

CVE-2010-3331

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted,...

CVE-2010-2748

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."...