CVE-2003-0821

CVE-2003-0821 covers a remote-code-execution vulnerability in Microsoft Excel 97, 2000, and 2002 due to a malicious Excel 4/XLM macro that bypasses the macro security model. Affected products could execute arbitrary code when a user opens a specially crafted spreadsheet, with the attacker potenti...

CVE-2003-0664

Microsoft Word 2000/97/98(J)/2002 contains a vulnerability where Word’s macro-security checks fail for certain document properties, allowing a malicious document to bypass macro security and automatically execute arbitrary macros. Impact: remote code execution likely under the user’s privileges w...

CVE-2008-1898

CVE-2008-1898 affects the WkImgSrv.dll ActiveX control (WksPictureInterface) in Microsoft Works 7 and Microsoft Office 2003/2007. A boundary/argument handling flaw allows remote code execution or browser crash when an invalid WksPictureInterface value is processed, typically via a crafted web pag...

CVE-2008-3019

CVE-2008-3019 describes a remote code execution vulnerability in Microsoft Office filters related to malformed Encapsulated PostScript (EPS) handling. A crafted EPS file could allow code execution when opened with affected Office products: Office 2000 SP3, XP SP3, and 2003 SP2, plus the Office Co...

CVE-2004-0573

CVE-2004-0573 describes a buffer overflow in the Microsoft WordPerfect 5.x Converter used by Office 2000, Office XP, Office 2003, and Works Suite 2001–2004. The overflow occurs when reading an overly long WordPerfect 5.x document, allowing a remote attacker to execute arbitrary code with the priv...

CVE-2008-4030

CVE-2008-4030 corresponds to a memory-corruption remote code execution issue in Microsoft Office Word (various versions) triggered by crafted control words in Rich Text Format (RTF) files or in RTF emails. Connected advisories attribute the vulnerability to a memory calculation error in Word that...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...

CVE-2006-3653

CVE-2006-3653 affects wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0. A remote attacker can cause a denial of service by processing crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files. Impact stated: CPU consumption or crash, with a low base score (CVSS v2: 2.6) and partial availabili...

CVE-2006-3654

The CVE-2006-3654 entry affects Microsoft Works Spreadsheet 8.0 (wksss.exe 8.4.702.0). The underlying issue is a buffer overflow triggered by crafted Excel files, enabling remote attackers to cause a denial of service (CPU consumption or crash). No patch/fix details are provided in the connected ...