Page 14 of 147 results (0.005 seconds)

CVSS: 8.8EPSS: 56%CPEs: 16EXPL: 0

10 Jan 2006 — Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation. • http://secunia.com/advisories/18368 •

CVSS: 7.8EPSS: 42%CPEs: 41EXPL: 3

19 Aug 2005 — Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrat... • https://www.exploit-db.com/exploits/26167 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.8EPSS: 49%CPEs: 7EXPL: 0

16 Oct 2004 — Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated. Vulnerabilidad desconocida en Microsoft Excel 2000, 2002, 2001 para Mac y v.X para Mac permite a atacantes remotos ejecutar código de su elección mediante un fichero malicioso conteniendo ciertos parámetros que no son validados adecuadamente. • http://marc.info/?l=bugtraq&m=109779810827096&w=2 •

CVSS: 8.8EPSS: 45%CPEs: 16EXPL: 0

17 Sep 2004 — Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website. Desbordamiento de búfer en el convertidor de Microsoft WordPerfect 5.x en Office 2000, Office XP, Offiece 2003 y las suites Works 2001 a 2004 permite a atacantes remotos ejecutar código de su elección mediante un documento o un sitio web malicioso. • http://marc.info/?l=bugtraq&m=109519646030906&w=2 •

CVSS: 10.0EPSS: 74%CPEs: 13EXPL: 2

04 Sep 2003 — Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. • https://www.exploit-db.com/exploits/23094 •

CVSS: 9.8EPSS: 10%CPEs: 3EXPL: 0

24 Sep 2002 — The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method. La función de Host en Microsoft Office Web Componentes (OWC) 2000 y 2002 está expuesta en componentes marcados como seguros para secuencias de comandos (scripting), lo que permite a atacantes ejecutar comandos arbitrarios mediante el método setTimeout. • http://marc.info/?l=bugtraq&m=101829645415486&w=2 •

CVSS: 6.5EPSS: 25%CPEs: 4EXPL: 0

24 Sep 2002 — The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file. El método LoadText en el componente de hoja de cálculo de Microsoft Office Web Componentes (OWC) 2000 y 2002 permite a atantes remotos leer ficheros arbitrarios con Internet Explorer mediante una URL que redirige al fichero objetivo. • http://marc.info/?l=bugtraq&m=101829911018463&w=2 •

CVSS: 9.1EPSS: 6%CPEs: 4EXPL: 0

23 Aug 2002 — Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object. Microsoft Office Web Components (OWC) 2000 y 2002 permite a atacantes remotos sortear la configuración de "Permitir pegar mediante script", incluso cuando está desactivada, mediante: el método Copy del objeto Cell (celda) el método Paste (pegar) del objeto Range ... • http://marc.info/?l=bugtraq&m=101829726516346&w=2 •

CVSS: 8.8EPSS: 10%CPEs: 7EXPL: 0

12 Aug 2002 — The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability." El Modelo de Seguridad de Macros en Microsoft Excel 2000 y 2002 para Windows permite a atacantes remotos ejecutar código adjuntando una macro inline a un objeto dentro de un libro de trabajo de Excel. También conocida como "Vulnerabilidad de Macros inline de Excel". • http://www.iss.net/security_center/static/9397.php •

CVSS: 9.8EPSS: 6%CPEs: 7EXPL: 0

12 Aug 2002 — The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass." El modelo de seguridad de macros en Microsoft Excel 2000 y 2002 para Windows permite a atacantes remotos ejecutar código creando un hiperenlace o dibujando una forma en un libro fuente que apunta a un libro destino que c... • http://www.osvdb.org/5175 •