CVE-2010-3218

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

CVE-2010-2748

CVE-2010-2748 corresponds to a Word boundary check vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac, where parsing a crafted Word document can trigger memory corruption and allow remote code execution. Connected sources confirm MS10-079 as the corresponding patch/mitigation from M...

CVE-2010-2747

CVE-2010-2747 is a Windows/Office Word remote code execution vulnerability caused by an uninitialized pointer in the Word document parser, leading to memory corruption when processing crafted files. Connected sources confirm multiple affected products across Word/Office on Windows and macOS, incl...

CVE-2010-3217

CVE-2010-3217 is a Microsoft Word 2002 SP3 vulnerability described as a double-free in Word’s LFO (List Format Override) processing that can lead to remote code execution when a crafted Word document is opened. The issue arises from handling certain Word document structures, enabling an attacker ...

CVE-2010-2747

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. OpenVAS Vulnerability Test $Id: secpodms10-079.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Word Remote Code Execution Vulnerabilities 2293194 Authors: Antu Sanadi Copyright: Copyright c 2010...

MS10-079: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194)

The remote Windows host is running a version of Microsoft Word or Word Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Word file, they could leverage this issue to execute arbitrary code subject to the user'...

PT-2010-4742 · Microsoft · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: A remote code execution issue exists due to improper handling of objects in memory when using Microsoft Word to read Word documents. This allows attackers to execute arbitrary code...

PT-2010-4740 · Microsoft · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 through 8 Description: A remote code execution issue exists due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when a document in an HTML form...

Internet Explorer Uninitialized Memory Corruption Vulnerability - CVE-2010-3331

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Internet Explorer Uninitialized Memory Corruption Vulnerability...

Microsoft Security Bulletin MS10-079 - Important Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194)

Microsoft Security Bulletin MS10-079 - Important Vulnerabilities in Microsoft Word Could Allow Remote Code Execution 2293194 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves eleven privately reported vulnerabilities in Microsoft Office...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office Word 2003 (KB2344911)

A security vulnerability exists in Microsoft Office Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Word (CVE-2010-3220) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Word Bookmark Handling (CVE-2010-3216) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Internet Explorer MSHTML Uninitialized Memory Corruption (MS10-071; CVE-2010-3331)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...

Microsoft Word (CVE-2010-3214) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Word Index Value Parsing (CVE-2010-3219) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Internet Explorer HtmlDlgHelper Class Memory Corruption (MS10-071; CVE-2010-3329)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...

Microsoft Word Uninitialized Pointer (CVE-2010-2747) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...