Microsoft Word PlfLfo Structure Memory Corruption (MS08-072; CVE-2008-4024)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory corruption error in Microsoft Word that fails to properly handle specially crafted Word files. A remote attacker could trigger th...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability. CVE-2007-6026. Dos exploit for windows platform source: http://www.securityfocus.com/bid/26468/info Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly...

CVE-2006-4513

Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...

[SECURITY] [DSA 945-1] New antiword packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 945-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...

DSA-945-1 antiword - insecure temporary file

Bulletin has no description...

Дырки в IMP

IMP/MSWordView сохраняет временные файлы, содержащие документы Word. Это позволяет любому желающему подсмотреть эти файлы, кроме того возможна отака на отказ путем создания большого числа файлов...