wvWare buffer overflow

Buffer overflow on parsing MS Word document DateTime filed...

aspell: Buffer overflow in word-list-compress

Background aspell is a popular spell-checker. Dictionaries are available for many languages. Description aspell includes a utility for handling wordlists called word-list-compress. This utility fails to do proper bounds checking when processing words longer than 256 bytes. Impact If an attacker...

CVE-2004-0548

CVE-2004-0548 describes multiple stack-based buffer overflows in Aspell’s word-list-compress utility (compress.c) that allow a local user to execute arbitrary code via a long wordlist entry. The overflow is triggered when using the (1) “c” compress option or (2) “d” decompress option, due to lack...

CVE-2004-0548

Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the 1 "c" compress option or 2 "d" decompress option...

MSWordPW.txt

Hi ... There are several vulnerabilities published/discussed regarding MS Word MS Office in general, however, 'tis is the most "no brainer" I've discovered ... Vulnerability: Password protected document that has "tracked changes, comments or forms" password protected Vulnerable: MS Word Win2K/XP...

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting (1)

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting 1 source: https://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Compute...

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting (2)

source: https://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to how shell: URIs are handled by the...

adv_microsoft_word_protection.txt

Guardeonic Solutions AG Thorsten Delbrouck http://www.guardeonic.com/ Security Advisory 01-2004 Advisory Name: Microsoft Word Form Protection Bypass Release Date: 2004-01-02 Affected Product: Microsoft Word Platform: Microsoft Windows, probably Apple Mac OS Version: tested on 2000, 2002 XP, 2003,...

CVE-2003-0820

Microsoft Word 97, 98J, 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2003-0820

CVE-2003-0820 / CVE-2003-0821 describe buffer overrun and macro security bypass in Microsoft Word and Excel (Word 97–2002, Works Suite 2001–2004). Root cause: improper validation of data lengths in Macro Names (Word) and related macro handling, enabling arbitrary code execution when a user opens ...

CVE-2003-0820

Microsoft Word 97, 98J, 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

Microsoft Security Bulletin MS03-050

Microsoft Security Bulletin MS03-050 Print Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run 831527 Issued: November 11, 2003 Version: 1.0 See all Office bulletins released November, 2003 Summary Who should read this document: Customers who are using Microsoft®...

MS03-050: Word and/or Excel may allow arbitrary code to run (831527)

The remote host is running a version of Microsoft Word and/or Microsoft Excel that are subject to a flaw that could allow arbitrary code to be run. An attacker could use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue Word or Excel file to the owne...

CVE-2003-0664

Microsoft Word 2002, 2000, 97, and 98J does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document...

Переполнение буфера при обработке структуры макроса

Затронутые продукты: Microsoft Word 97, Microsoft Word 2000 SR-1. В Microsoft Word XP этот баг пофиксен. При обработке документа Microsoft Word, содержащего макросы, может произойти переполнение буфера в стеке. Анализ недокументированной структуры макроса в документе, осуществляемый процессом...

Microsoft Word 97982002 - Malformed Document Denial of Service

Microsoft Word 97982002 - Malformed Document Denial of Service source: https://www.securityfocus.com/bid/8761/info It has been reported that Microsoft Word is prone to a vulnerability that may allow an attacker to crash the software. The problem occurs when an attacker modifies the memory structu...

Microsoft Word 97/98/2002 - Malformed Document Denial of Service

source: https://www.securityfocus.com/bid/8761/info It has been reported that Microsoft Word is prone to a vulnerability that may allow an attacker to crash the software. The problem occurs when an attacker modifies the memory structure of a Word document. If a user opens the malformed document, ...

[NT] Additional Information Released on Microsoft WordPerfect Document Converter Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft Word Perfect convertor buffer overflow

Buffer overflow during Word Perfect document convertion...

CVE-2003-0664

Microsoft Word 2002, 2000, 97, and 98J does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document...