CVE-2004-0846

Microsoft Excel is affected by CVE-2004-0846 due to a buffer overflow from improper validation of certain records/parameters in Excel files. The vulnerability affects Excel 2000, Excel 2002, Excel 2001 for Mac, and Excel v.X for Mac; Excel 2004 for Mac and Office 2003/XP SP3 are not affected. An ...

CVE-2006-2387

Microsoft Excel contains a remote-code-execution vulnerability CVE-2006-2387 in the parsing of a malformed DATETIME record within XLS files. Affected products include Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004–2006. The root cause is insuf...

CVE-2002-0152

The CVE-2002-0152 entry concerns a buffer overflow in Macintosh builds of several Microsoft applications. The vulnerability is triggered by the file:// directive when a large number of slashes (/) is supplied, allowing remote attackers to crash the affected applications or potentially execute arb...

CVE-2006-3650

CVE-2006-3650 is a remote code execution vulnerability in Microsoft Office (2000 SP3, XP SP3, 2003 SP1/SP2, and Mac variants Office 2004 for Mac and Office v.X for Mac) triggered by parsing a malformed chart record in Word documents. The flaw corrupts pointers during processing of malformed chart...

CVE-2006-3876

CVE-2006-3876 is a Microsoft PowerPoint vulnerability: malformed Data records in PPT files allow a user‑shaping attacker to execute arbitrary code. Affected are PowerPoint alongside Office suites (Office 2000/2002/2003/2004 for Mac, Office v.X for Mac). The flaw is described as a memory corruptio...

CVE-2006-3647

CVE-2006-3647 (Memmove Code Execution) affects Microsoft Word 2000/2002/2003/2004 for Mac and Word v.X for Mac. The vulnerability arises from a 16-bit length overflow in WordDocument parsing (offset 0xb4c) that can allow remote code execution via a crafted Word file. Connected sources describe th...

CVE-2006-4534

Microsoft Word’s Malformed Stack vulnerability (CVE-2006-4534) affects Word 2000, Word 2002, and Word 2003 (Office suite) and is exploitable via specially crafted Word files delivered as email attachments or hosted on the web. The underlying issue is memory corruption leading to remote code execu...