CVE-2007-0035

Word or Word Viewer in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."...

CVE-2007-0035

CVE-2007-0035 is the Word Array Overflow vulnerability in Microsoft Word/Word Viewer across Office 2000 SP3, XP SP3, 2003 SP2, Word 2004 for Mac, and Works Suite 2004–2006. The issue arises from improper handling of data in a certain array, enabling user-assisted remote code execution when a craf...

Microsoft Security Bulletin MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)

Microsoft Security Bulletin MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution 934232 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Word Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Word RTF Parsing Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in...

Microsoft Word Array Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in...

Microsoft Word fails to properly process crafted array data

Overview Microsoft Word contains a remote code execution vulnerability that could enable an attacker to execute arbitrary code and gain complete control of the vulnerable system. Description Microsoft Word fails to properly handle malformed data within an array. When a Word file is opened, Word...

VulnCheck KEV: CVE-2007-0870

Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service crash via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027...

MS07-024: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)

The remote host is running a version of Microsoft Word that could allow arbitrary code to be run. An attacker could use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it. Then a bug in the fon...

Word Viewer OCX 3.2 Remote Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bWordViewer.ocx v. 3.2.0.5 multiple methods Denial of Service/b url: http://www.officeocx.com/ price: from €63.95 update...

Word Viewer OCX 3.2 - Remote Denial of Service

Word Viewer OCX 3.2 - Remote Denial of Service 2007/05/03 ----------------------------------------------------------------------------- WordViewer.ocx v. 3.2.0.5 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty...

Word Viewer OCX 3.2 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================== Word Viewer OCX 3.2 Remote Denial of Service Exploit ==================================================== 2007/05/03 ----------------------------------------------------------------------------...

Word Viewer OCX 3.2 - Remote Denial of Service

2007/05/03 ----------------------------------------------------------------------------- WordViewer.ocx v. 3.2.0.5 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail: shinnaiatautisticidotorg...

CVE-2007-1910

Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc...

Buffer overflow

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service CPU consumption via crafted documents, as demonstrated by 1 file798-1.doc and 2 file613-1.doc, possibly related to a buffer overflow...

Buffer overflow

Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc...

CVE-2007-1911

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service CPU consumption via crafted documents, as demonstrated by 1 file798-1.doc and 2 file613-1.doc, possibly related to a buffer overflow...

CVE-2007-1911

CVE-2007-1911 affects Microsoft Word 2007. The connected documents describe multiple unspecified vulnerabilities that allow remote attackers to cause a denial of service (CPU exhaustion) by parsing crafted documents (e.g., file798-1.doc and file613-1.doc), with a possible relation to a buffer ove...

CVE-2007-1911

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service CPU consumption via crafted documents, as demonstrated by 1 file798-1.doc and 2 file613-1.doc, possibly related to a buffer overflow...

CVE-2007-1910

Microsoft Word 2007 is affected by a buffer overflow in wwlib.dll. The vulnerability, described across multiple sources, arises from improper validation of a value inside the Main Stream, enabling a remote attacker to trigger memory corruption via a crafted Word document (e.g., file789-1.doc). Im...

CVE-2007-1910

Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc...