CVE-2008-2752

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

The vulnerability (CVE-2008-2752) affects Microsoft Word 2000 (9.0.2812) and Word 2003 (11.8106.8172). It stems from improper handling of unordered lists in crafted .doc files, which can lead to memory corruption and application crash, enabling user-assisted remote attackers to potentially execut...

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word...

Microsoft Word Bulleted List Handling Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the application. Given the nature of this...

Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption

source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the...

[SECURITY] Fedora 7 Update: openoffice.org-2.3.0-6.9.fc7

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

[SECURITY] Fedora 9 Update: openoffice.org-2.4.1-17.3.fc9

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Quickly recover Word, Excel password-vulnerability warning-the black bar safety net

I give a important Word file plus a password, for security settings was more complex, did not think the time of use Forgot Password, but put your own barrier to the outside. Have to unlock a good way? Rushed to action: you can use Office Password Remover to save in a hurry. Download this green...

Microsoft word javascript execution

Products affected: Microsoft word 2003/2007 OS Tested : Windows Xp all patch The vulnerability is that you can run javascript in an arbitrary manner without permission of the user. While it is limited what you can get to run, this may help attackers using methods that distort the environment...

msword-xss.txt

Products affected: Microsoft word 2003/2007 OS Tested : Windows Xp all patch The vulnerability is that you can run javascript in an arbitrary manner without permission of the user. While it is limited what you can get to run, this may help attackers using methods that distort the environment...

Microsoft Word RTF畸形字符串处理堆溢出漏洞(MS08-026)

BUGTRAQ ID: 29104 CVECAN ID: CVE-2008-1091 Microsoft Word是Office套件中的文字处理软件。 Word处理特制RTF格式（.rtf）文件的方式中存在堆溢出漏洞，如果用户在Word中打开带有畸形字符串的特制.rtf文件，或在富文本电子邮件中预览带有畸形字符串的特制.rtf文件，就会触发这个溢出，导致执行任意指令。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Outlook 2007 SP1 Microsoft Outlook 2007...

Microsoft Word CSS处理内存破坏漏洞(MS08-026)

BUGTRAQ ID: 29105 CVECAN ID: CVE-2008-1434 Microsoft Word是Office套件中的文字处理软件。 Word处理特制DOC文档的方式中存在一个内存破坏漏洞，如果用户打开的Word文件中CSS选择器的数量大于特定值的话，就会破坏某一对象，导致Word访问已经释放的内存区域。成功利用这个漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Word Viewer 2003 SP1 Microsoft Word Viewer 2003 Microsoft Wo...

Microsoft Security Bulletin MS08-026 – Critical Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (951207)

Microsoft Security Bulletin MS08-026 – Critical Vulnerabilities in Microsoft Word Could Allow Remote Code Execution 951207 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Word that cou...

iDefense Security Advisory 05.13.08: Microsoft Word CSS Processing Memory Corruption Vulnerability

iDefense Security Advisory 05.13.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 13, 2008 I. BACKGROUND Microsoft Word is a word processing application that is distributed with Microsoft Office. Cascading Style Sheets CSS is a stylesheet language used to describe the presentation of...

Microsoft Word multiple security vulnerabilities

Memory coruption on RTF parsing, memory corruption on CSS parsing...

TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability

TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-04 May 13, 2008 -- CVE ID: CVE-2007-6026 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Word Microsoft Office Access -- TippingPointT...

CVE-2008-1091

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format .rtf file with a malformed string that triggers a "memory calculation error" and a heap-based...

CVE-2008-1434

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets CSS selectors, related to a "memory handling erro...

Memory corruption

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets CSS selectors, related to a "memory handling erro...

Heap overflow

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format .rtf file with a malformed string that triggers a "memory calculation error" and a heap-based...