CVE-2010-2747: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."...

CVE-2010-2750: Improper Control of Generation of Code

Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."...

CVE-2010-3215: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."...

CVE-2010-3216: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."...

PT-2010-4263

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2002 SP3 Office 2004 for Mac Description A remote code execution issue exists due to an improper boundary check when parsing a specially crafted Word file. This allows attackers to execute arbitrary code, potentially...

CVE-2010-3220: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-3221: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-2748: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."...

CVE-2010-3217: Undefined Security Weakness

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records, aka "Word Pointer Vulnerability."...

PT-2010-4262

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2002 SP3 Office 2004 for Mac Description A remote code execution issue exists due to improper handling of an uninitialized pointer during the parsing of a Word document. This allows attackers to execute arbitrary code v...

CVE-2010-3219: Improper Control of Generation of Code

Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."...

PT-2010-4655

Name of the Vulnerable Software and Affected Versions Microsoft Word version 2002 SP3 Description A double free vulnerability in Microsoft Word allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records. This issue exists in the way that...

CVE-2010-3218: Improper Control of Generation of Code

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

Microsoft Word sprmCMajority记录解析栈溢出漏洞（MS10-056）

BUGTRAQ ID: 42136 CVE ID: CVE-2010-1900 Word是微软Office套件中的文字处理工具。 在解析Word文档中的sprmCMajority记录时，由于处理sprmCMajority sprm组没有对参数执行检查，攻击者可以控制写入到栈缓冲区中的数据数量，触发栈溢出。成功利用此漏洞的攻击者可完全控制受影响的系统。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Wo...

Microsoft Works File Converter FontName buffer overflow

Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...

Microsoft Works File Converter FontName buffer overflow

Added: 06/15/2009 CVE: CVE-2009-1533 BID: 35184 OSVDB: 54939 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows command execution when a user opens a WPS file...

CVE-2007-3899: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...