3 matches found
CVE-2013-1324
CVE-2013-1324 describes a stack-based buffer overflow in Microsoft Office (including Office 2003 SP3, 2007 SP3, 2010 SP1/SP2, 2013, and 2013 RT) triggered by parsing WordPerfect (.wpd) documents, enabling remote code execution. The underlying issue is improper handling of crafted WordPerfect file...
CVE-2013-3889
This CVE (CVE-2013-3889) corresponds to a memory corruption vulnerability in Microsoft Excel and related Office components. The affected products include Excel 2007 SP3, 2010 SP1/SP2, 2013 and RT, Office 2007 SP3, 2010 SP1/SP2, 2013/RT, Office for Mac 2011, Excel Viewer, Office Compatibility Pack...
CVE-2013-5054
The Microsoft Office 2013 and 2013 RT applications are susceptible to a design/logic flaw known as the Token Hijacking Vulnerability . A remote attacker can exploit this by enticing a victim to open an Office file hosted on a malicious website, allowing the attacker to discover and obtain authent...