CVE-2005-1683

Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file...

UNICODE BUFFER OVERFLOW IN MS-WORD

UNICODE BUFFER OVERFLOW IN MS-WORD =================================== .mcw is the ms-word format file for Macintosh. the unicode buffer overflow occurs when the user opens the malformed .mcw document. Proof of concept: ----------------- by modifying the .mcw file by using binary editor as follow...

Microsoft Word buffer overflow

Buffer overflow on .mcw Word for Macintosh files parsing...

CVE-2005-0558

Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document...

CVE-2005-0545

Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been dispute...

CVE-2005-0063

The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host MSHTA, as demonstrated using a...

security flaw

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...

CVE-2005-0558

Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a crafted document...

CVE-2005-0063

The CVE-2005-0063 issue stems from Windows Shell/MSHTA handling of file associations. A remote code execution vulnerability exists when a user opens a specially crafted OLE2 document (e.g., Word) whose CLSID is manipulated to invoke HTML Application Host (MSHTA) to process the file. Exploitation ...

CVE-2005-0558

CVE-2005-0558 corresponds to a buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 that could allow remote code execution via a crafted document. The issue is documented in Microsoft Security Bulletin MS05-023 and is associated with the CAN-2004-0963 CAN entry; Word 2002/2003 updates...

Microsoft Word integer overflow

Integer overflow in signed/unsigned conversion during .doc file parsing...

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)

Microsoft Security Bulletin MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution 890169 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who are using the affected versions of Microsoft Word should apply the appropriate security update a...

Microsoft Word Malformed Document Buffer Overflow Vulnerability

Description Microsoft Word is prone to a buffer overflow vulnerability. This issue presents itself when Microsoft Word attempts to parse a malformed document. This could result in execution of arbitrary code in the context of a user who opens the malicious document. Internet Explorer is a likely...

Microsoft Word contains a buffer overflow vulnerability

Overview Microsoft Word contains a vulnerability that may result in the execution of code on the system with the privileges of the current user. Description Microsoft Word contains a buffer overflow vulnerability that may be exploited by opening a maliciously-crafted word document. Successful...

Microsoft Word contains a buffer overflow vulnerability

Overview Microsoft Word contains a vulnerability that may result in the execution of code on the system with the privileges of the current user. Description Microsoft Word contains a vulnerability that may be exploited by opening a maliciously-crafted word document. Successful exploitation would...

Microsoft Word Unspecified Document File Buffer Overflow Vulnerability

Description Microsoft Word is affected by a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data. Microsoft has not specified exactly where the error may occur. This could result in execution of arbitrary code in the...

MS05-023: Vulnerability in Word May Lead to Code Execution (890169)

The remote host is running a version of Microsoft Word that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue Word file to a user of the remote computer and have it open it. Then the macros contained in the Word file would bypass the security model of Word,...

OpenOffice buffer overflow

Buffer overflow on Microsoft Word files parsing...

CVE-2004-0963

Buffer overflow in Microsoft Word 2002 10.6612.6714 SP3, and possibly other versions, allows remote attackers to cause a denial of service application exception and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including 1 an offset that triggers an...

[Full-Disclosure] Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability

Finjan Security Advisory Microsoft Office XP Remote Buffer Overflow Vulnerability Introduction Finjan has discovered a new vulnerability in Microsoft Word XP that would allow a hacker to launch a buffer overflow attack. This attack could occur when a user opened a Word document using Internet...