CVE-2011-0107: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library...

CVE-2011-0977: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office...

CVE-2010-3947

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability."...

PT-2010-5188

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A remote code execution issue exists in the way Microsoft Office parses specially crafted FlashPix image files. This could allow remote code execution if a user opens an Offic...

PT-2010-5185

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Microsoft Works 9 Description A heap-based buffer overflow exists in the TIFF image converter of the graphics filters, allowing remote attackers to execute arbitrary code via a crafted TI...

PT-2010-5189

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A remote code execution issue exists in the way Microsoft Office parses specially crafted FlashPix image files. This could allow remote code execution if a user opens an Offic...

PT-2010-5184

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office 2003 SP3 Microsoft Office Converter Pack Description The issue is related to an integer overflow in the PICT image converter, allowing remote attackers to execute arbitrary code via a crafted PICT image...

CVE-2010-3946: Undefined Security Weakness

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

CVE-2010-3950: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image in an Office document, ak...

PT-2010-5187

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Office Converter Pack Works 9 Description The issue is related to the TIFF image converter in the graphics filters, which does not properly convert data. This allows remote attackers to execute arbitrary code or cause a...

PT-2010-5186

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A buffer overflow issue exists in the TIFF image converter within the graphics filters of the affected software, allowing remote attackers to execute arbitrary code through a...

CVE-2010-3952: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap...

CVE-2010-3949: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Buffer Overflow Vulnerability."...

CVE-2010-3951: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability."...

Microsoft Office艺术绘图记录解析内存破坏漏洞（MS10-087）

BUGTRAQ ID: 44656 CVE ID: CVE-2010-3334 Microsoft Office是非常流行的办公软件套件。 Office在解析艺术绘图记录时没有充分地执行验证，如果msofbtSp记录指定了某些标志就可以触发内存破坏，导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office for Mac 2011 Microsoft Office 2010 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Office 2003...

CVE-2010-3336: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."...

CVE-2010-3334: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbt...

PT-2010-4746

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Office 2004 for Mac Office 2008 for Mac Office for Mac 2011 Open XML File Format Converter for Mac Description The issue allows remote attackers to execute arbitrary code via a crafted Office document that triggers memo...

CVE-2010-0243: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."...

CVE-2009-2528: Improper Control of Generation of Code

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."...