CVE-2007-0671

CVE-2007-0671 is a remote-code-execution vulnerability in Microsoft Office Excel (affecting Excel 2000/XP/2003 and Mac equivalents) where a specially crafted Excel file can trigger arbitrary code execution. The vulnerability arises from improper handling/parsing of office records, enabling remote...

CVE-2006-3877

PowerPoint Malformed Record Memory Corruption Vulnerability (CVE-2006-3877) affects multiple Office suites. A remote code execution flaw exists when PowerPoint opens a specially crafted file with malformed records, allowing an attacker to gain full control of the affected system if the user runs ...

CVE-2006-0001

CVE-2006-0001 is a stack-based buffer overflow in Microsoft Publisher 2000–2003 triggered by parsing a crafted .pub font string, allowing a user-assisted remote attacker to execute arbitrary code. The vulnerability arises from insufficient validation during Publisher’s processing of Publisher doc...

CVE-2004-0573

CVE-2004-0573 describes a buffer overflow in the Microsoft WordPerfect 5.x Converter used by Office 2000, Office XP, Office 2003, and Works Suite 2001–2004. The overflow occurs when reading an overly long WordPerfect 5.x document, allowing a remote attacker to execute arbitrary code with the priv...

CVE-2008-0102

CVE-2008-0102 is a Microsoft Office Publisher vulnerability (MS08-012) involving remote code execution via crafted .pub files. Affected: Publisher 2000 SP3, Publisher 2002 SP3, Publisher 2003 SP2. The issue (Publisher Invalid Memory Reference) stems from improper validation/loading of memory valu...

CVE-2007-6534

CVE-2007-6534 involves multiple unspecified vulnerabilities in Microsoft Office Publisher that allow a user‑assisted remote attacker to cause an application crash by processing a crafted PUB file, potentially involving WordArt. Affected product: Microsoft Office Publisher. Vulnerable functionalit...