wv -- Multiple Integer Overflow Vulnerabilities

Secunia reports: Some vulnerabilities have been reported in wvWare, which can be exploited by malicious people to cause a DoS Denial of Service and potentially compromise an application using the library. The vulnerabilities are caused due to integer overflows within the "wvGetLFOrecords" and...

Microsoft Word畸形栈远程代码执行漏洞(MS06-060)

Microsoft Word是非常流行的文字处理办公软件。 Word在处理畸形恶意的文档时存在溢出漏洞，如果用户受骗打开了恶意文档就可能导致执行任意代码。 目前这个漏洞正在被名为Trojan.MDropper.Q的木马积极的利用。在执行这个木马的时候，会有以下操作： 1. 创建以下文件 %System%.exe 注意: %System%为系统文件夹，默认为C:\Windows\System Windows 95/98/Me、C:\Winnt\System32 Windows NT/2000或C:\Windows\System32 Windows XP。 2...

Debian DSA-1100-1 : wv2 - integer overflow

A boundary checking error has been discovered in wv2, a library for accessing Microsoft Word documents, which can lead to an integer overflow induced by processing word files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 • Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create ...

Microsoft Office multiple security vulnerabilities

Multiple Excel vulnerabilities on different records type parsing and formats conversion. Multiple Microsoft Word code execution vulnerabilities. Memory corruptions in different Office products...

[Full-disclosure] MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create a...

Microsoft Word vulnerable to remote code execution

Overview A remote code execution vulnerability in Microsoft Word can allow a remote attacker to execute arbitrary code via a specially crafted mail merge file. Description Microsoft Word contains a remote code execution vulnerability that can be exploited when a specially crafted mail merge file ...

Microsoft Security Bulletin MS06-060 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (924554)

Microsoft Security Bulletin MS06-060 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution 924554 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Word Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

CVE-2006-3651

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

CVE-2006-4693

Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651...

CVE-2006-3647

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than...

CVE-2006-3651

CVE-2006-3651 is the Microsoft Word Mail Merge vulnerability. The connected documents confirm a memory handling flaw in Word’s mail-merge handling that can allow remote code execution when a specially crafted mail-merge file is opened. Affected products include Word 2000, 2002, 2003, and Word 200...

CVE-2006-3647

CVE-2006-3647 (Memmove Code Execution) affects Microsoft Word 2000/2002/2003/2004 for Mac and Word v.X for Mac. The vulnerability arises from a 16-bit length overflow in WordDocument parsing (offset 0xb4c) that can allow remote code execution via a crafted Word file. Connected sources describe th...

CVE-2006-4693

CVE-2006-4693 is a remote code execution vulnerability in Microsoft Word for Mac (Word 2004 for Mac and Word v.X for Mac). A crafted Word file can trigger code execution during parsing, and this issue is treated separately from CVE-2006-3647 and CVE-2006-3651. It is addressed by Microsoft Securit...

CVE-2006-3651

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

CVE-2006-4693

Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651...

CVE-2006-3647

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than...

Security Update for Word 2002 (KB920817)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Word Mac Remote Code Execution Vulnerability

Description Microsoft Word for Mac is prone to a remote code-execution vulnerability when parsing Word files. Exploiting this vulnerability may allow an attacker to execute arbitrary machine code in the context of the user who opened the file. An attacker could leverage this issue to gain the...

Microsoft Word Mail Merge Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to load a malicious Word file. If the vulnerability is successfully exploited, this could result in the execution of arbitrary code in the context of the current...