CVE-2004-0200

CVE-2004-0200 is a buffer-overflow vulnerability in the JPEG parsing engine of Microsoft GDI+ (GDIPlus.dll). The flaw allows remote code execution when a specially crafted JPEG image is processed, with the attack vector involving JPEG data that is mis-sized during a memory copy. The vulnerability...

CVE-2006-3877

PowerPoint Malformed Record Memory Corruption Vulnerability (CVE-2006-3877) affects multiple Office suites. A remote code execution flaw exists when PowerPoint opens a specially crafted file with malformed records, allowing an attacker to gain full control of the affected system if the user runs ...

CVE-2007-0671

CVE-2007-0671 is a remote-code-execution vulnerability in Microsoft Office Excel (affecting Excel 2000/XP/2003 and Mac equivalents) where a specially crafted Excel file can trigger arbitrary code execution. The vulnerability arises from improper handling/parsing of office records, enabling remote...

CVE-2006-5994

CVE-2006-5994 is a remote-code-execution vulnerability in Microsoft Word (2000, 2002, Word Viewer 2003, Word 2003, and Word on Mac 2004/2004 v. X; also affects Works 2004–2006). The root cause, per the connected materials, is that Word does not sufficiently validate certain strings when processin...

CVE-2007-0515

CVE-2007-0515 affects Microsoft Word via a Section Table/Table Stream buffer overflow in Word documents. The vulnerability allows memory corruption that, per sources, enabled remote code execution on Word 2000 (and denial of service on Word 2003) when users open a crafted .doc file. Root cause: S...

CVE-2010-2747

CVE-2010-2747 is a Windows/Office Word remote code execution vulnerability caused by an uninitialized pointer in the Word document parser, leading to memory corruption when processing crafted files. Connected sources confirm multiple affected products across Word/Office on Windows and macOS, incl...

CVE-2004-0848

CVE-2004-0848 corresponds to a buffer overflow in Microsoft Office XP that can allow remote code execution via specially crafted HTML links referencing URL file locations. Connected advisories detail that the overflow occurs in the Office process handling URL file references, enabling arbitrary c...

CVE-2010-1901

CVE-2010-1901 affects Microsoft Word and related Office components (Word 2002 SP3, 2003 SP3, 2007 SP2; Mac: Office 2004/2008, Open XML Converter for Mac, Word Viewer, Compatibility Pack SP2) where the RTF parsing engine mishandles unspecified properties in rich text data, causing a memory corrupt...

CVE-2006-6456

CVE-2006-6456 is a remote code execution flaw in Microsoft Word 2000, Word 2002, Word 2003 and Word Viewer 2003 caused by malformed data structures in Word files. Attackers could exploit via specially crafted Word files (e.g., attachments or web-hosted content) to execute arbitrary code with the ...

CVE-2003-0820

CVE-2003-0820 / CVE-2003-0821 describe buffer overrun and macro security bypass in Microsoft Word and Excel (Word 97–2002, Works Suite 2001–2004). Root cause: improper validation of data lengths in Macro Names (Word) and related macro handling, enabling arbitrary code execution when a user opens ...

CVE-2010-1903

CVE-2010-1903 is a Word HTML Linked Objects Memory Corruption vulnerability affecting Microsoft Office Word/Word Viewer. A remote attacker could trigger memory corruption by processing a specially crafted Word file, leading to remote code execution or potential denial of service. Public disclosur...

CVE-2010-3214

The CVE-2010-3214 entry maps to a stack-based buffer overflow in Microsoft Word triggered by parsing specific Word structures (UPX data) in crafted Word documents, enabling remote code execution. Affected products include Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Word for Mac 2004 and 2008; th...

CVE-2007-1202

CVE-2007-1202 is the Word RTF Parsing Vulnerability. It affects Word/Word Viewer and related Office products (Office 2000 SP3, Word 2000; Office XP SP3/Word 2002; Office 2003 SP2/Word 2003; Word Viewer 2003; Office 2004 for Mac; Works Suites 2004–2006) where Word mishandles rich text property str...

CVE-2010-1900

CVE-2010-1900 affects Microsoft Word (various Windows/macOS editions) and related components. A remote-code-execution/memory-corruption flaw arises from Word opening malformed Word files that contain malformed records, enabling an attacker to execute arbitrary code or cause memory corruption on i...

CVE-2006-6561

CVE-2006-6561 is a memory‑corruption vulnerability in Microsoft Word 2000, Word 2002, and Word Viewer 2003 triggered by a crafted DOC file, enabling remote code execution. The issue is demonstrated via the 12122006-djtest.doc file and is related to other Word memory‑corruption CVEs (e.g., CVE-200...

CVE-2002-1056

CVE-2002-1056 affects Outlook 2000/2002 configured to use Word as the email editor. A flaw in Word allows a crafted reply/forwarded message to execute arbitrary scripts embedded in HTML/RTF, enabling remote code execution on the user’s host. The issue stems from Outlook/Word not blocking scripts ...

CVE-2005-0564

The CVE-2005-0564 entry corresponds to a remote code execution vulnerability in Word 2000, Word 2002, and Microsoft Works Suite 2000–2004 caused by a font parsing buffer overflow. A specially crafted Word document containing long font information can trigger an unchecked boundary condition in the...

CVE-2001-0501

CVE-2001-0501 affects Microsoft Word (Word 2002 and earlier). The vulnerability arises from failure to reliably detect macros embedded in malformed Word documents, allowing a document author to execute arbitrary commands as the user who opens the document even if macro security is set to higher l...

CVE-2010-3215

CVE-2010-3215 is a Microsoft Word remote code execution vulnerability caused by improper handling of return values during Word document parsing, leading to memory corruption. A crafted Word file could allow arbitrary code execution on affected systems (Word 2002 SP3 and Office 2004 for Mac are li...

CVE-2010-1902

CVE-2010-1902 describes a remote-code-execution flaw in Microsoft Word’s RTF parsing engine. The vulnerability is triggered by crafted RTF data, specifically via drawing object control words that copy properties into a heap buffer without bounds checking, causing a heap buffer overflow. Affected ...

CVE-2010-3219

CVE-2010-3219 is the Word Index Parsing Vulnerability in Microsoft Word. It enables remote code execution when parsing a specially crafted Word file, potentially allowing an attacker to take control of the affected system with the caller’s privileges. The MS10-079 security update from Microsoft a...

CVE-2010-3216

CVE-2010-3216 is the Word Bookmarks Vulnerability in Microsoft Word when parsing a Word file with bookmarks, allowing remote code execution. The initial entry lists affected products as Word 2002 SP3 and Office 2004 for Mac, with memory-corruption via invalid pointers in bookmarks. Microsoft’s MS...

CVE-2010-3221

Microsoft Word Remote Code Execution (CVE-2010-3221) arises from memory corruption when parsing crafted Word documents, allowing remote code execution. Affected products across the Word family include Word 2002 SP3, 2003 SP3, Word Viewer, and Office/Word for Mac variants cited in MS10-079 materia...

CVE-2003-0664

Microsoft Word 2000/97/98(J)/2002 contains a vulnerability where Word’s macro-security checks fail for certain document properties, allowing a malicious document to bypass macro security and automatically execute arbitrary macros. Impact: remote code execution likely under the user’s privileges w...

CVE-2003-0821

CVE-2003-0821 covers a remote-code-execution vulnerability in Microsoft Excel 97, 2000, and 2002 due to a malicious Excel 4/XLM macro that bypasses the macro security model. Affected products could execute arbitrary code when a user opens a specially crafted spreadsheet, with the attacker potenti...

CVE-2006-3651

CVE-2006-3651 is the Microsoft Word Mail Merge vulnerability. The connected documents confirm a memory handling flaw in Word’s mail-merge handling that can allow remote code execution when a specially crafted mail-merge file is opened. Affected products include Word 2000, 2002, 2003, and Word 200...

CVE-2008-1092

CVE-2008-1092 describes a buffer overflow in the Microsoft Jet Database Engine (msjet40.dll) prior to 4.0.9505.0 that allows remote code execution via a crafted Word file. The issue is associated with the Jet Engine and is stated to be the same as CVE-2007-6026 in sources; exploitation was report...

CVE-2010-3220

CVE-2010-3220 is the Word Parsing Vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac. The issue, a memory corruption/heap overflow in Word’s parsing of crafted Word files, enables remote code execution when a user opens a malicious document. Exploitation requires the user to open a ...

CVE-2004-0573

CVE-2004-0573 describes a buffer overflow in the Microsoft WordPerfect 5.x Converter used by Office 2000, Office XP, Office 2003, and Works Suite 2001–2004. The overflow occurs when reading an overly long WordPerfect 5.x document, allowing a remote attacker to execute arbitrary code with the priv...

CVE-2010-2748

CVE-2010-2748 corresponds to a Word boundary check vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac, where parsing a crafted Word document can trigger memory corruption and allow remote code execution. Connected sources confirm MS10-079 as the corresponding patch/mitigation from M...

CVE-2002-1143

Affected software: Microsoft Word and Microsoft Excel (Office suite). Vulnerability: information disclosure via field codes in Word (INCLUDETEXT) and external updates in Excel, allowing remote attackers to insert and exfiltrate local data when a document is returned to the attacker. Root cause: m...

CVE-2005-0558

CVE-2005-0558 corresponds to a buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 that could allow remote code execution via a crafted document. The issue is documented in Microsoft Security Bulletin MS05-023 and is associated with the CAN-2004-0963 CAN entry; Word 2002/2003 updates...

CVE-2010-3217

CVE-2010-3217 is a Microsoft Word 2002 SP3 vulnerability described as a double-free in Word’s LFO (List Format Override) processing that can lead to remote code execution when a crafted Word document is opened. The issue arises from handling certain Word document structures, enabling an attacker ...

CVE-2010-3218

CVE-2010-3218 is a heap-based buffer overflow in Microsoft Word 2002 SP3 that allows remote code execution when a user opens a specially crafted Word document. Public details in the connected sources confirm a family of Word vulnerabilities addressed by MS10-079, with Word components affected acr...

CVE-2010-2750

CVE-2010-2750 is the Word Index Vulnerability affecting Word 2002 SP3 and Office 2004 for Mac, caused by an array/index handling error that leads to memory corruption and remote code execution when opening a crafted Word file. Microsoft’s MS10-079 security bulletin (and related advisories) addres...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...

CVE-2007-3899

CVE-2007-3899 concerns memory corruption in Word affecting Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac. The root cause is a malformed string in a Word file that can be processed by Word, enabling user-assisted remote code execution on vulnerable hosts. The Mac variant is reported in the...

CVE-2004-0963

CVE-2004-0963 is a Word parsing buffer overflow (Word 2002 SP3 and other versions) that could allow remote code execution when a user opens a specially crafted Word document. The connected advisories (MS05-023) document the vulnerability in Word 2000–2003 and provide updates/mitigations: Word Win...