Microsoft Office / Word / Excel / Power Point multiple security vulnerabilities

Multiple memory corruptions, protection bypass...

MS08-042: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (955048)

The remote host is running a version of Microsoft Word that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open i...

Security Update for Microsoft Word 2002 (KB954463)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Word 2003 (KB954464)

A security vulnerability exists in Microsoft Office Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048)

Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution 955048 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in Microsoft Word. This...

Microsoft Word Crafted SmartTag Record Code Execution (MS08-042; CVE-2008-2244)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. A remote attacker could exploit this issue via a malformed Word file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...

Design/Logic Flaw

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

CVE-2008-2244

CVE-2008-2244 is a Word record parsing vulnerability in Word 2002/2003 (SP3/SP2) where specially crafted Word files trigger a memory corruption leading to remote code execution. The root cause is a memory handling error when processing records in Word documents, enabling an attacker to run arbitr...

CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

VulnCheck KEV: CVE-2008-2244

Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc...

Microsoft Word Malformed Record Value Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Successful attacks may allow arbitrary malicious code to run in the context of the user running the application. Failed attack attempts may result in a crash. Reports indicate that this issue affects Microsoft Office XP...

CentOS 4 : openoffice.org2 (CESA-2008:0537)

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...

Microsoft Word无序列表处理远程内存破坏漏洞

BUGTRAQ ID: 29769 CNCAN ID：CNCAN-2008061908 Microsoft Word是一款流行的文字处理程序。 Microsoft Word无序列表处理存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsof...

Memory corruption

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are...

CVE-2008-2752

The vulnerability (CVE-2008-2752) affects Microsoft Word 2000 (9.0.2812) and Word 2003 (11.8106.8172). It stems from improper handling of unordered lists in crafted .doc files, which can lead to memory corruption and application crash, enabling user-assisted remote attackers to potentially execut...

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption

Microsoft Word 20002002 - Bulleted List Handling Remote Memory Corruption source: https://www.securityfocus.com/bid/29769/info Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word...

Microsoft Word Bulleted List Handling Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the application. Given the nature of this...