SuSE 10 Security Update : wv (ZYPP Patch Number 2280)

Two integer overflows were found in the Microsoft Word converter library 'wv', which could potentially be used to crash programs using this library or to even execute code. - A LVL Count Integer Overflow Vulnerability was fixed. - A LFO Count Integer Overflow Vulnerability was fixed. Both problem...

Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability

No description provided by source. /------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Description Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. Remote attackers can exploit this issue to execute arbitrary machine code in the context of a user running the application. Successful exploits will...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability. CVE-2007-6026. Dos exploit for windows platform source: http://www.securityfocus.com/bid/26468/info Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly...

DEBIAN-CVE-2007-5395

Stack-based buffer overflow in the separateword function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote attackers to execute arbitrary code via a long word, as reachable through the separatesentence function...

Verity KeyView SDK Multiple File Format Parsing Vulnerabilities

Several vulnerabilities exist in the popular Verity KeyView SDK used in many enterprise applications like IBM Lotus Notes. When parsing several different file formats a standard stack overflow occurs allowing a malicious user to gain complete control of the affected machine under the rights of th...

openSUSE 10 Security Update : wv (wv-2279)

Two integer overflows were found in the Microsoft Word converter library 'wv', which could potentially be used to crash programs using this library or to even execute code. - A LVL Count Integer Overflow Vulnerability was fixed. - A LFO Count Integer Overflow Vulnerability was fixed. Both problem...

Microsoft Word Malformed String Memory Corruption (MS07-060; CVE-2007-3899)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word for MAC. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Word Mac file with a malformed string. Successful exploitation of...

Microsoft Word工作区内存破坏远程代码执行漏洞（MS07-060）

BUGTRAQ ID: 25906 CVECAN ID: CVE-2007-3899 Word是Office办公套件中的文字处理软件。 Word处理特制Word文件的方式中存在一个远程执行代码漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 如果用户打开带有畸形字符串的特制Word文件，该漏洞就可能允许远程执行指令。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2004 for Mac Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法：...

Memory corruption

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

CVE-2007-3899

CVE-2007-3899 concerns memory corruption in Word affecting Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac. The root cause is a malformed string in a Word file that can be processed by Word, enabling user-assisted remote code execution on vulnerable hosts. The Mac variant is reported in the...

Security Update for Word 2002 (KB942670)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

VulnCheck KEV: CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

Microsoft Word Workspace Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in...

MS07-060: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (942695)

The remote host is running a version of Microsoft Word that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it. Then a bug in the font...

php floating point exception inside wordwrap

The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service divide-by-zero error and application crash, or infinite loop via certain arguments, as demonstrated by a 'chr0, 0, ""'...

[SECURITY] Fedora Core 6 Update: openoffice.org-2.0.4-5.5.24

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Fuzzing in Microsoft Word overflow analysis and use-vulnerability and early warning-the black bar safety net

This article has been published in the hacker line of Defense of the 2 0 0 7 years 7 monthly. The author and the hacker line of Defense on the retention of copyright, reproduced, please indicate the original source. For the reader: overflow of lovers Pre-knowledge: Assembly language, buffer...