CVE-2011-0107: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library...

CVE-2011-0977: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office...

CVE-2010-3947

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability."...

PT-2010-5186

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A buffer overflow issue exists in the TIFF image converter within the graphics filters of the affected software, allowing remote attackers to execute arbitrary code through a...

CVE-2010-3950: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image in an Office document, ak...

CVE-2010-3945: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."...

CVE-2010-3946: Undefined Security Weakness

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

CVE-2010-3952: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap...

CVE-2010-3951: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability."...

CVE-2010-3949: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Buffer Overflow Vulnerability."...

PT-2010-5187

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Office Converter Pack Works 9 Description The issue is related to the TIFF image converter in the graphics filters, which does not properly convert data. This allows remote attackers to execute arbitrary code or cause a...

PT-2010-5188

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A remote code execution issue exists in the way Microsoft Office parses specially crafted FlashPix image files. This could allow remote code execution if a user opens an Offic...

Microsoft Office艺术绘图记录解析内存破坏漏洞（MS10-087）

BUGTRAQ ID: 44656 CVE ID: CVE-2010-3334 Microsoft Office是非常流行的办公软件套件。 Office在解析艺术绘图记录时没有充分地执行验证，如果msofbtSp记录指定了某些标志就可以触发内存破坏，导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office for Mac 2011 Microsoft Office 2010 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Office 2003...

CVE-2010-3336: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."...

CVE-2010-3334: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbt...

CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability 1. Advisory Information Title: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability...

CVE-2010-0243: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."...

CVE-2009-2528: Improper Control of Generation of Code

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."...

CVE-2009-2518: Undefined Security Weakness

Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap aka BMP image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability."...

CVE-2009-1534: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office We...