CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

VulnCheck KEV: CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

Microsoft Word Malformed Record Value Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Successful attacks may allow arbitrary malicious code to run in the context of the user running the application. Failed attack attempts may result in a crash. Reports indicate that this issue affects Microsoft Office XP...

CentOS 4 : openoffice.org2 (CESA-2008:0537)

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...

Microsoft Word无序列表处理远程内存破坏漏洞

BUGTRAQ ID: 29769 CNCAN ID：CNCAN-2008061908 Microsoft Word是一款流行的文字处理程序。 Microsoft Word无序列表处理存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsof...

Memory corruption

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

The vulnerability (CVE-2008-2752) affects Microsoft Word 2000 (9.0.2812) and Word 2003 (11.8106.8172). It stems from improper handling of unordered lists in crafted .doc files, which can lead to memory corruption and application crash, enabling user-assisted remote attackers to potentially execut...

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word...

Microsoft Word Bulleted List Handling Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the application. Given the nature of this...

Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption

source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the...

[SECURITY] Fedora 7 Update: openoffice.org-2.3.0-6.9.fc7

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

[SECURITY] Fedora 9 Update: openoffice.org-2.4.1-17.3.fc9

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Quickly recover Word, Excel password-vulnerability warning-the black bar safety net

I give a important Word file plus a password, for security settings was more complex, did not think the time of use Forgot Password, but put your own barrier to the outside. Have to unlock a good way? Rushed to action: you can use Office Password Remover to save in a hurry. Download this green...

Microsoft word javascript execution

Products affected: Microsoft word 2003/2007 OS Tested : Windows Xp all patch The vulnerability is that you can run javascript in an arbitrary manner without permission of the user. While it is limited what you can get to run, this may help attackers using methods that distort the environment...

msword-xss.txt

Products affected: Microsoft word 2003/2007 OS Tested : Windows Xp all patch The vulnerability is that you can run javascript in an arbitrary manner without permission of the user. While it is limited what you can get to run, this may help attackers using methods that distort the environment...

Microsoft Word CSS处理内存破坏漏洞(MS08-026)

BUGTRAQ ID: 29105 CVECAN ID: CVE-2008-1434 Microsoft Word是Office套件中的文字处理软件。 Word处理特制DOC文档的方式中存在一个内存破坏漏洞，如果用户打开的Word文件中CSS选择器的数量大于特定值的话，就会破坏某一对象，导致Word访问已经释放的内存区域。成功利用这个漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Word Viewer 2003 SP1 Microsoft Word Viewer 2003 Microsoft Wo...

Microsoft Word RTF畸形字符串处理堆溢出漏洞(MS08-026)

BUGTRAQ ID: 29104 CVECAN ID: CVE-2008-1091 Microsoft Word是Office套件中的文字处理软件。 Word处理特制RTF格式（.rtf）文件的方式中存在堆溢出漏洞，如果用户在Word中打开带有畸形字符串的特制.rtf文件，或在富文本电子邮件中预览带有畸形字符串的特制.rtf文件，就会触发这个溢出，导致执行任意指令。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Outlook 2007 SP1 Microsoft Outlook 2007...

iDefense Security Advisory 05.13.08: Microsoft Word CSS Processing Memory Corruption Vulnerability

iDefense Security Advisory 05.13.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 13, 2008 I. BACKGROUND Microsoft Word is a word processing application that is distributed with Microsoft Office. Cascading Style Sheets CSS is a stylesheet language used to describe the presentation of...