5695 matches found
iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability
iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Word is a word processing application which is heavily used in corporate environments. Word comes with Office Converters that allow it to import files from various forma...
CVE-2008-0109
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block FIB of a Word file, which triggers length calculation errors and memory corruption...
Memory corruption
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block FIB of a Word file, which triggers length calculation errors and memory corruption...
CVE-2008-0109
CVE-2008-0109 affects Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Word Viewer 2003. The root cause is a memory corruption in parsing certain fields in the File Information Block (FIB) of Word documents, triggered by crafted content, enabling remote code execution. Impact is fu...
CVE-2008-0109
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block FIB of a Word file, which triggers length calculation errors and memory corruption...
Security Update for Microsoft Office Word 2003 (KB943983)
A security vulnerability exists in Microsoft Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Word 2002 (KB943957)
A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Security Bulletin MS08-009 - Critical Vulnerability in Microsoft Word Could Allow Remote Code Execution (947077)
Microsoft Security Bulletin MS08-009 - Critical Vulnerability in Microsoft Word Could Allow Remote Code Execution 947077 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves one privately reported vulnerability in Microsoft Word th...
Microsoft Word Unspecified Memory Corruption Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in...
Microsoft Word File Handling Memory Corruption (MS08-009; CVE-2008-0109)
Microsoft Word is a popular word processor. By sending a specially crafted Word document, an attacker can cause a memory corruption, and remotely execute arbitrary code on the affected system...
Microsoft Word memory corruption
Memory corruption on .doc file parsing...
MS08-009: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (947077)
The remote host is running a version of Microsoft Word that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open i...
Microsoft Word code execution vulnerability
Overview Microsoft Word contains a vulnerability that may allow an attacker to execute arbitrary code. Description Per Microsoft Security Bulletin MS08-009:A remote code execution vulnerability exists in the way that Word handles specially crafted Word files. The vulnerability could allow remote...
Debian Security Advisory DSA 872-1 (koffice)
The remote host is missing an update to koffice announced via advisory DSA 872-1. Chris Evans discovered a buffer overflow in the RTF importer of kword, a word processor for the KDE Office Suite that can lead to the execution of arbitrary code. The old stable distribution woody does not contain a...
Debian Security Advisory DSA 1100-1 (wv2)
The remote host is missing an update to wv2 announced via advisory DSA 1100-1. A boundary checking error has been discovered in wv2, a library for accessing Microsoft Word documents, which can lead to an integer overflow induced by processing word files. The old stable distribution woody does not...
Word 2003 denial of service
Apparently, the word causes a fault when we create a malformed file in the following way. It creates a new file word and he inserts a "wordart" which completely stuffed with letters "A", then we open a hex editor ubicamos where are the letters "A" for the "wordart" and overwrites until much furth...
Microsoft Office Publisher /Word DoS
Crash on malformed .pub file with WordArt object parsing...
Microsoft Word Wordart Doc拒绝服务漏洞
BUGTRAQ ID: 26981 CNCAN ID:CNCAN-2007122408 Microsoft Word是一款微软提供的办公文字处理软件。 Microsoft Word处理特殊构建的程序存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立一个新文件增加一个使用多个“A”的"wordart"选项，当应用程序打开时可导致崩溃。 Microsoft Word 2003 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 目前没有解决方案提供：...
[SECURITY] Fedora 8 Update: mousepad-0.2.13-1.fc8
Mousepad is a text editor for Xfce based on Leafpad. The initial reason for Mousepad was to provide printing support, which would have been difficult for Leafpad for various reasons. Although some features are under development, currently Mousepad has follow ing features: Complete support for UTF...
Microsoft Office不安全文档签名漏洞
Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...