Lucene search
+L

6135 matches found

OSV
OSV
added 2007/11/08 2:46 a.m.5 views

DEBIAN-CVE-2007-5395

Stack-based buffer overflow in the separateword function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in AbiWord Link Grammar 4.2.4, allows remote attackers to execute arbitrary code via a long word, as reachable through the separatesentence function...

10CVSS8.4AI score0.06997EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2007/10/31 12:00 a.m.45 views

Verity KeyView SDK Multiple File Format Parsing Vulnerabilities

Several vulnerabilities exist in the popular Verity KeyView SDK used in many enterprise applications like IBM Lotus Notes. When parsing several different file formats a standard stack overflow occurs allowing a malicious user to gain complete control of the affected machine under the rights of th...

9.3CVSS3AI score0.20906EPSS
SaveExploits5References1
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:00 a.m.27 views

openSUSE 10 Security Update : wv (wv-2279)

Two integer overflows were found in the Microsoft Word converter library 'wv', which could potentially be used to crash programs using this library or to even execute code. - A LVL Count Integer Overflow Vulnerability was fixed. - A LFO Count Integer Overflow Vulnerability was fixed. Both problem...

5.1CVSS5.5AI score0.03446EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2007/10/15 12:00 a.m.20 views

Microsoft Word Malformed String Memory Corruption (MS07-060; CVE-2007-3899)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word for MAC. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Word Mac file with a malformed string. Successful exploitation of...

9.3CVSS7.2AI score0.29167EPSS
SaveExploits1
seebug.org
seebug.org
added 2007/10/12 12:00 a.m.33 views

Microsoft Word工作区内存破坏远程代码执行漏洞(MS07-060)

BUGTRAQ ID: 25906 CVECAN ID: CVE-2007-3899 Word是Office办公套件中的文字处理软件。 Word处理特制Word文件的方式中存在一个远程执行代码漏洞,远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 如果用户打开带有畸形字符串的特制Word文件,该漏洞就可能允许远程执行指令。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2004 for Mac Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法:...

9.3CVSS6.9AI score0.29167EPSS
SaveExploits1
Prion
Prion
added 2007/10/09 10:17 p.m.24 views

Memory corruption

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

9.3CVSS7.8AI score0.29167EPSS
SaveExploits1References8Affected Software2
NVD
NVD
added 2007/10/09 10:17 p.m.30 views

CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

9.3CVSS7.5AI score0.29167EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2007/10/09 10:00 p.m.44 views

CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

7.5AI score0.29167EPSS
SaveExploits1References8
CVE
CVE
added 2007/10/09 10:00 p.m.65 views

CVE-2007-3899

CVE-2007-3899 concerns memory corruption in Word affecting Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac. The root cause is a malformed string in a Word file that can be processed by Word, enabling user-assisted remote code execution on vulnerable hosts. The Mac variant is reported in the...

9.3CVSS7.5AI score0.29167EPSS
SaveIn wildExploits1References8Affected Software2
Microsoft Security Update
Microsoft Security Update
added 2007/10/09 5:00 p.m.11 views

Security Update for Word 2002 (KB942670)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

3.2AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2007/10/09 12:00 a.m.9 views

VulnCheck KEV: CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

9.3CVSS6.2AI score0.29167EPSS
SaveIn wildExploits1References2
Symantec
Symantec
added 2007/10/09 12:00 a.m.26 views

Microsoft Word Workspace Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Word file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in...

7.8AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/10/09 12:00 a.m.28 views

MS07-060: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (942695)

The remote host is running a version of Microsoft Word that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it. Then a bug in the font...

9.3CVSS6.4AI score0.29167EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2007/09/20 1:10 p.m.11 views

php floating point exception inside wordwrap

The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service divide-by-zero error and application crash, or infinite loop via certain arguments, as demonstrated by a 'chr0, 0, ""'...

5CVSS5.9AI score0.02993EPSS
SaveExploits0References4
Fedora
Fedora
added 2007/09/18 10:20 p.m.37 views

[SECURITY] Fedora Core 6 Update: openoffice.org-2.0.4-5.5.24

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

9.3CVSS0.5AI score0.11967EPSS
SaveExploits0
myhack58
myhack58
added 2007/07/20 12:00 a.m.134 views

Fuzzing in Microsoft Word overflow analysis and use-vulnerability and early warning-the black bar safety net

This article has been published in the hacker line of Defense of the 2 0 0 7 years 7 monthly. The author and the hacker line of Defense on the retention of copyright, reproduced, please indicate the original source. For the reader: overflow of lovers Pre-knowledge: Assembly language, buffer...

8.6AI score
SaveExploits0
Prion
Prion
added 2007/06/21 1:30 a.m.23 views

Heap overflow

Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message sent through the MSN protocol, or possibly other protocols, with a crafted UTF-8 string, which triggers improper memory allocation for word wrapping when a...

9.3CVSS8.6AI score0.07729EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2007/06/21 1:30 a.m.19 views

CVE-2007-3305

Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message sent through the MSN protocol, or possibly other protocols, with a crafted UTF-8 string, which triggers improper memory allocation for word wrapping when a...

9.3CVSS8.2AI score0.07729EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2007/05/25 12:00 a.m.35 views

RHEL 5 : libwpd (RHSA-2007:0055)

Updated libwpd packages to correct a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. libwpd is a library for reading and converting Word Perfect documents. iDefense reported...

9.3CVSS6AI score0.06722EPSS
SaveExploits0References5
seebug.org
seebug.org
added 2007/05/11 12:00 a.m.32 views

Microsoft Word数组数据处理远程代码执行漏洞(MS07-024)

Microsoft Word是Office套件中的文字处理工具。 Microsoft Word在处理数组数据时存在输入验证漏洞,远程攻击者可能利用此漏洞控制用户机器。 Word处理数组中的数据时没有执行充分的验证,如果用户受骗打开了恶意的Word文档的话,就可能导致执行任意代码。 Microsoft Office 2004 for Mac Microsoft Word Viewer 2003 Microsoft Word 2003 SP2 Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 Microsoft Works Suite 2006...

7.5AI score
SaveExploits0
Rows per page
Query Builder