CVE-2005-2429

CVE-2005-2429 : Firefox, when opening Microsoft Word documents, does not properly set permissions on shared sections, allowing remote attackers to write arbitrary data to open applications in Microsoft Office. The available sources (NVD/CVE records) describe the issue but do not provide concrete ...

CVE-2005-2429

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office...

CVE-2005-2429

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office...

CVE-2005-2429: Undefined Security Weakness

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to write arbitrary data to open applications in Microsoft Office...

Microsoft Word buffer overflows

Stack overflow on font information parsing...

CVE-2005-0564

The CVE-2005-0564 entry corresponds to a remote code execution vulnerability in Word 2000, Word 2002, and Microsoft Works Suite 2000–2004 caused by a font parsing buffer overflow. A specially crafted Word document containing long font information can trigger an unchecked boundary condition in the...

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

CVE-2005-0564

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

Microsoft Word Malformed Document Font Processing Buffer Overflow Vulnerability

Description Microsoft Word is affected by a remote buffer overflow vulnerability. This vulnerability presents itself when a .doc file contains specific malformed input. Upon attempting to read the malformed .doc file, the affected application fails to properly validate data within the file. This...

Microsoft Security Bulletin MS05-035 Vulnerability in Microsoft Word Could Allow Remote Code Execution

Microsoft Security Bulletin MS05-035 Vulnerability in Microsoft Word Could Allow Remote Code Execution 903672 Issued: July 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Word 2000, Microsoft Word 2002 or Microsoft Works Suite Impact of Vulnerability: Remo...

[VulnWatch] iDEFENSE Security Advisory 07.12.05: Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability

Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 07.12.05 www.idefense.com/application/poi/display?id=281&type=vulnerabilities July 12, 2005 I. BACKGROUND Microsoft Word is the word processing component of the Microsoft Office package. More...

MS05-035: Vulnerability in Word May Lead to Code Execution (903672)

The remote host is running a version of Microsoft Word that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue Word file to a user of the remote computer and have him...

Microsoft Word buffer overflow in font processing routine

Overview A buffer overflow in the font processing routine used by Microsoft Word may allow a remote attacker to execute code on a vulnerable system. Description Microsoft Word contains a buffer overflow in the routine that processes fonts. An remote attacker may be able to trigger the buffer...

CVE-2005-0564: Undefined Security Weakness

Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information...

CVE-2002-1776

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...

CVE-2002-1776

Symantec Norton AntiVirus 2002 is affected by CVE-2002-1776. The issue allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. The vendor disputes the claim, noting that...

CVE-2002-1776: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...

CVE-2005-1683

Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file...

CVE-2005-1683

CVE-2005-1683 describes a buffer overflow in Microsoft Word components: winword.exe on Windows (versions up to 10.2627.6714 and earlier) and Word for Macintosh prior to SP3 for Word 2002, exploitable via a crafted .mcw file. This leads to remote denial of service and, possibly, arbitrary code exe...

CVE-2005-1683: Undefined Security Weakness

Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file...