CVE-2006-5994

CVE-2006-5994 is a remote-code-execution vulnerability in Microsoft Word (2000, 2002, Word Viewer 2003, Word 2003, and Word on Mac 2004/2004 v. X; also affects Works 2004–2006). The root cause, per the connected materials, is that Word does not sufficiently validate certain strings when processin...

CVE-2007-0515

CVE-2007-0515 affects Microsoft Word via a Section Table/Table Stream buffer overflow in Word documents. The vulnerability allows memory corruption that, per sources, enabled remote code execution on Word 2000 (and denial of service on Word 2003) when users open a crafted .doc file. Root cause: S...

CVE-2004-0848

CVE-2004-0848 corresponds to a buffer overflow in Microsoft Office XP that can allow remote code execution via specially crafted HTML links referencing URL file locations. Connected advisories detail that the overflow occurs in the Office process handling URL file references, enabling arbitrary c...

CVE-2006-6456

CVE-2006-6456 is a remote code execution flaw in Microsoft Word 2000, Word 2002, Word 2003 and Word Viewer 2003 caused by malformed data structures in Word files. Attackers could exploit via specially crafted Word files (e.g., attachments or web-hosted content) to execute arbitrary code with the ...

CVE-2003-0820

CVE-2003-0820 / CVE-2003-0821 describe buffer overrun and macro security bypass in Microsoft Word and Excel (Word 97–2002, Works Suite 2001–2004). Root cause: improper validation of data lengths in Macro Names (Word) and related macro handling, enabling arbitrary code execution when a user opens ...

CVE-2007-1202

CVE-2007-1202 is the Word RTF Parsing Vulnerability. It affects Word/Word Viewer and related Office products (Office 2000 SP3, Word 2000; Office XP SP3/Word 2002; Office 2003 SP2/Word 2003; Word Viewer 2003; Office 2004 for Mac; Works Suites 2004–2006) where Word mishandles rich text property str...

CVE-2007-0027

CVE-2007-0027 affects Microsoft Excel versions including Excel 2000 SP3, 2002 SP3, 2003 SP2, Excel 2004 for Mac, and Excel v.X for Mac. The flaw is a remote code execution due to memory corruption when parsing malformed IMDATA records in BIFF Excel files. An attacker could exploit this by enticin...

CVE-2007-0029

CVE-2007-0029 is the Excel Malformed String Vulnerability affecting Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and Excel 2004/Mac (and Excel v.X for Mac). The issue allows user-assisted remote attackers to achieve arbitrary code execution by parsing a malformed string in Excel files. Microsoft...

CVE-2007-0031

CVE-2007-0031 affects Microsoft Excel: heap-based buffer overflow in BIFF8 PALETTE records can allow a user-assisted remote attacker to execute arbitrary code. Vulnerable products include Excel 2000 SP3, 2002 SP3, 2003 SP2, and Mac versions (2004 for Mac, v.X for Mac). The flaw is triggered by op...

CVE-2006-6561

CVE-2006-6561 is a memory‑corruption vulnerability in Microsoft Word 2000, Word 2002, and Word Viewer 2003 triggered by a crafted DOC file, enabling remote code execution. The issue is demonstrated via the 12122006-djtest.doc file and is related to other Word memory‑corruption CVEs (e.g., CVE-200...

CVE-2007-0030

CVE-2007-0030 is the Excel Malformed Column Record Vulnerability. A memory corruption flaw occurs when parsing the BIFF8 Column field, allowing a remote attacker to execute arbitrary code by convincing a user to open a crafted Excel file. Affected products include Microsoft Excel 2000 SP3, 2002 S...

CVE-2007-0035

CVE-2007-0035 is the Word Array Overflow vulnerability in Microsoft Word/Word Viewer across Office 2000 SP3, XP SP3, 2003 SP2, Word 2004 for Mac, and Works Suite 2004–2006. The issue arises from improper handling of data in a certain array, enabling user-assisted remote code execution when a craf...

CVE-2006-0009

CVE-2006-0009 is the Office routing slip remote code execution vulnerability. A buffer/memory corruption occurs when parsing a routing slip in an Office document, potentially allowing arbitrary code execution. Affected products include Microsoft Office 2000 SP3, Office XP SP3, and related PowerPo...

CVE-2007-0028

CVE-2007-0028 affects multiple Excel variants: Excel 2000, 2002, 2003, Excel Viewer 2003, Office 2004 for Mac, and Office v.X for Mac. The vulnerability stems from improper handling of certain opcodes during Excel file parsing, which can corrupt memory and allow user‑assisted remote attackers to ...

CVE-2007-0209

CVE-2007-0209 corresponds to the Word Malformed Drawing Object Vulnerability. A remote code execution flaw exists in Microsoft Word when parsing a malformed drawing object, potentially allowing arbitrary code execution via a specially crafted Word file. Affected products include Microsoft Word 20...

CVE-2003-0821

CVE-2003-0821 covers a remote-code-execution vulnerability in Microsoft Excel 97, 2000, and 2002 due to a malicious Excel 4/XLM macro that bypasses the macro security model. Affected products could execute arbitrary code when a user opens a specially crafted spreadsheet, with the attacker potenti...

CVE-2004-0573

CVE-2004-0573 describes a buffer overflow in the Microsoft WordPerfect 5.x Converter used by Office 2000, Office XP, Office 2003, and Works Suite 2001–2004. The overflow occurs when reading an overly long WordPerfect 5.x document, allowing a remote attacker to execute arbitrary code with the priv...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...