279 matches found
CVE-2009-0563
Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word,...
Microsoft explains how ActiveX in Office is abused by attackers
On the Microsoft Secure Windows Iniative blog, software engineer Chengyun discusses the default behaviour of ActiveX controls embedded in Office documents. The software giant also provides information on how can an attacker abuse ActiveX and how Office users can change the behavior of ActiveX...
Memory corruption
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to...
Microsoft Windows OLE32.DLL Word文档处理拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的OLE32.DLL库处理畸形DOC文档时存在漏洞，可能导致资源器在访问文档时发生崩溃。 Windows的OLE32.DLL库在处理包含有超大文件大小值的.doc文档时存在错误的指针应用。用户不必打开恶意的文档，只要将光标移动至该文档的图标就会导致资源管理器崩溃。 Microsoft Windows XP SP2 Microsoft Windows 2000SP4 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
OpenOffice畸形Word文件整数溢出漏洞
OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice在处理某些畸形Word文档时存在整数溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 memset会试图向堆中写入大量的0： Breakpoint 2, WW8PLCF::GeneratePLCF this=0xb12a36e8, pSt=0xabae6cc8, nPN=0, ncpN=587202560 at /usr/src/debug/OOD680m5/sw/source/filter/ww8/ww8scan.cxx:2299 2299 nIMax = ncpN;...
Preemptive Protection Against Zero-Day Vulnerability in Microsoft Word 2000 (925059)
A zero-day code execution vulnerability exists in Microsoft Word 2000. To exploit this vulnerability, a remote attacker must convince a user to open a maliciously crafted Word document that contains a Trojan horse referred to as Trojan.Mdropper.Q...
openoffice.org -- multiple vulnerabilities
OpenOffice.org Security Team reports: Fixed in OpenOffice.org 3.2 CVE-2006-4339: Potential vulnerability from 3rd party libxml2 libraries CVE-2009-0217: Potential vulnerability from 3rd party libxmlsec libraries CVE-2009-2493: OpenOffice.org 3 for Windows bundles a vulnerable version of MSVC...
Lightning cracked 5 seconds beheaded Word document password-vulnerability warning-the black bar safety net
For Word document encryption would have been understandable, but if over time you forget the password? Although the network is flooded with a variety of cracked software, but they are without exception the use of a brute-force way, takes a long time and the success rate low. Today we will use a...
CVE-2006-2197
CVE-2006-2197 concerns the wv2 library (used for accessing Microsoft Word documents). A boundary/size check issue leads to an integer overflow when processing Word files, enabling context-dependent attackers to execute arbitrary code. Multiple advisories (Ubuntu USN-300-1, Debian DSA-1100, Gentoo...
CVE-2006-2197
Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document...
wv2 -- Integer Overflow Vulnerability
Secunia reports: A vulnerability has been reported in wvWare wv2 Library, which potentially can be exploited by malicious people to compromise an application using the library. The vulnerability is caused due to an integer overflow error in "wordhelper.h" when handling a Word document. This can b...
Buffer overflow
Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...
CVE-2006-0761
Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...
wvWare buffer overflow
Buffer overflow on parsing MS Word document DateTime filed...
Security Bulletin MS01-034
---------------------------------------------------------------------- Title: Malformed Word Document Could Enable Macro to Run Automatically Date: 21 June 2001 Software: Word Impact: Run macro without warning Bulletin: MS01-034 Microsoft encourages customers to review the Security Bulletin at:...
FW: DOS for Content Technologies' MAILsweeper for SMTP.
Hello, I have discovered a DOS for Content Technologies' MAILsweeper for SMTP product. This was completely accidental. I noticed that no mail was leaving the MAILsweeper SMTP gateway so I checked the queues... I had over 10,000 e-mails queued up! So I tried to stop the MIMEsweeper service, it...
Two Problems in IMP 2
Crimelabs, Inc. www.crimelabs.com Security Advisory Crimelabs Security Advisory CLABS200003 Title: IMP/MSWordView /tmp Problems Date: 22 April, 2000 Application: IMP with MSWordView Platform: Any supported by IMP, MSWordView Severity: Moderate -- anyone can view Word document attachments processe...
melissa.macro.virus.txt
Date: Fri, 26 Mar 1999 17:05:51 -0800 From: Aleph One To: [email protected] Subject: Melissa Macro Virus I normally don't allow virus posts through the list as they seldom represent a new threat, just a new example of an already existing one, but this one is getting enough play to warrant a...
