CVSS: 9.3EPSS: 66%CPEs: 10EXPL: 0CVE-2011-0655 – Microsoft PowerPoint TimeColorBehaviorContainer Floating Point Record Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0655
12 Apr 2011 — Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an in... • http://www.securitytracker.com/id?1025340 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 57%CPEs: 12EXPL: 0CVE-2011-0656 – Microsoft Office PowerPoint PersistDirectoryEntry Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0656
12 Apr 2011 — Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate PersistDirectoryEntry records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, w... • http://osvdb.org/71770 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 64%CPEs: 11EXPL: 0CVE-2011-0979 – Microsoft Office Excel Office Art Object Parsing Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0979
07 Feb 2011 — Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a malformed object record, related to a "stray reference," aka "Excel Linked List Corruption Vulnerability." Excel 2002 SP3, 2003 SP3, 2007 SP2 y 2010; Office 2004, 2008 y 2011 para Mac; Open XML File For... • http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 59%CPEs: 3EXPL: 0CVE-2010-3945
https://notcve.org/view.php?id=CVE-2010-3945
16 Dec 2010 — Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability." Desbordamiento del búfer en el convertidor de imágenes CGM de los filtros gráficos de Microsoft Office XP SP3, Office 2003 SP3, y Office Converter Pack permite a atacantes remotos ejecutar código de su elección mediante u... • http://www.securitytracker.com/id?1024887 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 64%CPEs: 3EXPL: 0CVE-2010-3946
https://notcve.org/view.php?id=CVE-2010-3946
16 Dec 2010 — Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability." Desbordamiento de enteros en el convertidor de imágenes PICT en los filtros de gráficos en Microsoft Office XP SP3, Office 2003 SP3 y Office Converter Pack permite a atacantes remotos ejecutar código arbitrario a tr... • http://www.securitytracker.com/id?1024887 • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 59%CPEs: 3EXPL: 0CVE-2010-3947
https://notcve.org/view.php?id=CVE-2010-3947
16 Dec 2010 — Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability." Desbordamiento de búfer basado en memoria dinámica (heap) en el convertidor de imágenes TIFF en Microsoft Office XP SP3, Office Converter Pack, y Works 9, permite a atacantes remotos ejecutar código de su elección a ... • http://www.securitytracker.com/id?1024887 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 59%CPEs: 2EXPL: 0CVE-2010-3949
https://notcve.org/view.php?id=CVE-2010-3949
16 Dec 2010 — Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Buffer Overflow Vulnerability." Desbordamiento de búfer en el convertidor de imágenes TIFF en los filtros de gráficos en Microsoft Office XP SP3 y Office Converter Pack permite a atacantes remotos ejecutar código arbitrario a través de una imagen TIFF manipulada en u... • http://www.securitytracker.com/id?1024887 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 58%CPEs: 3EXPL: 0CVE-2010-3950
https://notcve.org/view.php?id=CVE-2010-3950
16 Dec 2010 — The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka "TIFF Image Converter Memory Corruption Vulnerability." El convertidor de imágenes TIFF en los filtros gráficos de Microsoft Office XP SP3, Office Converter Pack, y Works 9 no convierte los datos adecuadamente, ... • http://www.securitytracker.com/id?1024887 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 59%CPEs: 2EXPL: 0CVE-2010-3951
https://notcve.org/view.php?id=CVE-2010-3951
16 Dec 2010 — Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability." Desbordamiento de búfer en el convertidor de imágenes FlashPix en Microsoft Office XP SP3 y Office Converter Pack permite a atacantes remotos ejecutar código de su elección a través de una imagen FlashPix en un documento de... • http://www.securitytracker.com/id?1024887 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 58%CPEs: 2EXPL: 0CVE-2010-3952
https://notcve.org/view.php?id=CVE-2010-3952
16 Dec 2010 — The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap Corruption Vulnerability." El convertidor de imagen FlashPix en los filtros gráficos en Microsoft Office XP SP3 y Office Converter Pack permite a atacantes remotos ejecutar código de su elección o provocar una deneg... • http://www.securitytracker.com/id?1024887 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •