Page 2 of 79 results (0.026 seconds)

CVSS: 9.3EPSS: 38%CPEs: 4EXPL: 0

CVE-2013-3855

https://notcve.org/view.php?id=CVE-2013-3855

11 Sep 2013 — Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Microsoft Word 2003 y 2007, Office Compatibility Pack SP3, y Word Viewer permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento de Office manipulado. Aka "Word Memory... • http://www.us-cert.gov/ncas/alerts/TA13-253A • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 46%CPEs: 12EXPL: 0

CVE-2013-3857

https://notcve.org/view.php?id=CVE-2013-3857

11 Sep 2013 — Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Microsoft Word Automation Services en SharePoint Server 2010 SP1 y SP2, Word Web App 2010 SP1 y SP2 en Office ... • http://www.us-cert.gov/ncas/alerts/TA13-253A • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 46%CPEs: 8EXPL: 0

CVE-2013-3858

https://notcve.org/view.php?id=CVE-2013-3858

11 Sep 2013 — Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3849. Microsoft Word Automation Services en SharePoint Serve... • http://www.us-cert.gov/ncas/alerts/TA13-253A • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 19%CPEs: 5EXPL: 0

CVE-2013-3160

https://notcve.org/view.php?id=CVE-2013-3160

11 Sep 2013 — Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability." Microsoft Office 2003 SP3 y 2007 SP3, Word 2003 SP3 y 2007 SP3, y Word Viewer permiten a un atacante remoto leer archivos a discrección a través de un documento XML que contenga... • http://www.us-cert.gov/ncas/alerts/TA13-253A • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.3EPSS: 81%CPEs: 9EXPL: 0

CVE-2012-2539 – Microsoft Word Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2012-2539

12 Dec 2012 — Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability." Microsoft Word 2003 SP3, 2007 SP2 y SP3, y 2010 SP1; Word Viewer; Office Compatibility Pack SP2 y SP3; y Office Web Apps 2010 SP1 permiten a atacantes remotos ejecutar código de su e... • http://www.us-cert.gov/cas/techalerts/TA12-346A.html • CWE-787: Out-of-bounds Write •

CVSS: 9.3EPSS: 57%CPEs: 10EXPL: 0

CVE-2012-2528

https://notcve.org/view.php?id=CVE-2012-2528

09 Oct 2012 — Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka "RTF File listid Use-After-Free Vulnerability." Vulnerabilidad de uso después de liberación en Microsoft Word 2003 SP3, 2007 SP2 y SP3, y 2010 SP1; Word Viewer; Office Compatibility Pack SP2 y SP3; ... • http://www.securityfocus.com/bid/55781 • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 58%CPEs: 6EXPL: 0

CVE-2012-0183 – Microsoft Office 2007 RTF Mismatch Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2012-0183

09 May 2012 — Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability." Microsoft Word 2003 SP3 y 2007 SP2 y SP3, Office 2008 y 2011 para Mac, y Office Compatibility Pack SP2 y SP3 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) mediante datos R... • http://secunia.com/advisories/49111 •

CVSS: 9.3EPSS: 57%CPEs: 2EXPL: 0

CVE-2010-2747

https://notcve.org/view.php?id=CVE-2010-2747

13 Oct 2010 — Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability." Microsoft Word 2002 SP3 y Office 2004 para Mac no maneja adecuadamente los punteros no inicializados durante el parseo de un documento Word, lo que permite a atacantes remotos ejecutar código de su elecci´no a través de d... • http://www.securityfocus.com/archive/1/514310/100/0/threaded • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 51%CPEs: 2EXPL: 0

CVE-2010-2748

https://notcve.org/view.php?id=CVE-2010-2748

13 Oct 2010 — Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability." Microsoft Word 2002 SP3 y Office 2004 para Mac no comprueba adecuadamente un límite sin especificar durante el análisis de un documento Word, lo que permite a atacantes remotos ejecutar código de su elección a través de un documen... • http://www.us-cert.gov/cas/techalerts/TA10-285A.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 54%CPEs: 2EXPL: 0

CVE-2010-2750

https://notcve.org/view.php?id=CVE-2010-2750

13 Oct 2010 — Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability." Error de índice de matriz en Word 2002 SP3 y Office 2004, de Microsoft para Mac, permite a los atacantes remotos ejecutar código arbitrario por medio de un documento de Word especialmente diseñado que desencadena corrupción en memoria, también se conoce como "Word Index Vulnerability". • http://www.securityfocus.com/archive/1/514292/100/0/threaded • CWE-94: Improper Control of Generation of Code ('Code Injection') •