CVE-2005-2502

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file...

CVE-2005-2502

CVE-2005-2502 is a buffer overflow in Apple’s Mac OS X AppKit that handles Microsoft Word files. The vulnerability affects AppKit-based applications (e.g., TextEdit) on Mac OS X 10.3.9 and 10.4.2 and could allow an attacker to execute arbitrary code via a crafted Word document. The root cause is ...

CVE-2005-2502

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file...

Apple Mac OS X AppKit vulnerable to buffer overflow via maliciously crafted Microsoft Word files

Overview A buffer overflow vulnerability exists in a component of Apple's Mac OS X operating system that handles Microsoft Word files. Description The Cocoa Application Framework also referred to as the Application Kit, or AppKit is one of the core Cocoa frameworks supplied with Apple's Mac OS X...

CVE-2005-2429

CVE-2005-2429 : Firefox, when opening Microsoft Word documents, does not properly set permissions on shared sections, allowing remote attackers to write arbitrary data to open applications in Microsoft Office. The available sources (NVD/CVE records) describe the issue but do not provide concrete ...

CVE-2005-2429

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office...

CVE-2005-2429

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office...

Microsoft Word buffer overflows

Stack overflow on font information parsing...

CVE-2005-0564

The CVE-2005-0564 entry corresponds to a remote code execution vulnerability in Word 2000, Word 2002, and Microsoft Works Suite 2000–2004 caused by a font parsing buffer overflow. A specially crafted Word document containing long font information can trigger an unchecked boundary condition in the...

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

Microsoft Security Bulletin MS05-035 Vulnerability in Microsoft Word Could Allow Remote Code Execution

Microsoft Security Bulletin MS05-035 Vulnerability in Microsoft Word Could Allow Remote Code Execution 903672 Issued: July 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Word 2000, Microsoft Word 2002 or Microsoft Works Suite Impact of Vulnerability: Remo...

Microsoft Word Malformed Document Font Processing Buffer Overflow Vulnerability

Description Microsoft Word is affected by a remote buffer overflow vulnerability. This vulnerability presents itself when a .doc file contains specific malformed input. Upon attempting to read the malformed .doc file, the affected application fails to properly validate data within the file. This...

[VulnWatch] iDEFENSE Security Advisory 07.12.05: Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability

Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 07.12.05 www.idefense.com/application/poi/display?id=281&type=vulnerabilities July 12, 2005 I. BACKGROUND Microsoft Word is the word processing component of the Microsoft Office package. More...

Microsoft Word buffer overflow in font processing routine

Overview A buffer overflow in the font processing routine used by Microsoft Word may allow a remote attacker to execute code on a vulnerable system. Description Microsoft Word contains a buffer overflow in the routine that processes fonts. An remote attacker may be able to trigger the buffer...

MS05-035: Vulnerability in Word May Lead to Code Execution (903672)

The remote host is running a version of Microsoft Word that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue Word file to a user of the remote computer and have him...

CVE-2002-1776

Symantec Norton AntiVirus 2002 is affected by CVE-2002-1776. The issue allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. The vendor disputes the claim, noting that...

CVE-2002-1776

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...

CVE-2005-1683

CVE-2005-1683 describes a buffer overflow in Microsoft Word components: winword.exe on Windows (versions up to 10.2627.6714 and earlier) and Word for Macintosh prior to SP3 for Word 2002, exploitable via a crafted .mcw file. This leads to remote denial of service and, possibly, arbitrary code exe...

CVE-2005-1683

Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file...