Page 6 of 240 results (0.006 seconds)

CVSS: 9.3EPSS: 69%CPEs: 5EXPL: 0

CVE-2010-3336

https://notcve.org/view.php?id=CVE-2010-3336

10 Nov 2010 — Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability." Microsoft Office XP SP3, Office 2004 y 2008 para Mac, Office para Mac 2011, y Open XML File Format Converter para Mac permite a atacantes remotos ejecutar código de su elección a través de un documento Office manipulado que provoca una c... • http://secunia.com/advisories/38521 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 69%CPEs: 8EXPL: 0

CVE-2010-3335 – Microsoft Excel MSODrawing Improper Exception Handling Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2010-3335

09 Nov 2010 — Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability." Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 y 2008 para Mac, Office para Mac 2011, y Open XML File Format Converter para Mac permite a atacantes r... • http://secunia.com/advisories/38521 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 59%CPEs: 4EXPL: 0

CVE-2010-2573 – Microsoft Office PowerPoint Unknown Animation Node Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2010-2573

09 Nov 2010 — Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability." Desbordamiento de entero en Microsoft PowerPoint 2002 SP3 y 2003 SP3, PowerPoint Viewer SP2, y Office 2004 para Mac permite a atacantes remotos ejecutar código de su elección a través de un documento PowerPoint manipulado, también conocida co... • http://www.us-cert.gov/cas/techalerts/TA10-313A.html • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 61%CPEs: 12EXPL: 0

CVE-2010-3214

https://notcve.org/view.php?id=CVE-2010-3214

13 Oct 2010 — Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Stack Overflow Vulnerability." Desbordamiento de búfer basado en pila en Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, y 2010; Office 2004 y... • http://www.securityfocus.com/archive/1/514302/100/0/threaded • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 56%CPEs: 2EXPL: 0

CVE-2010-3215

https://notcve.org/view.php?id=CVE-2010-3215

13 Oct 2010 — Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability." Microsoft Word 2002 SP3 y Office 2004 para Mac no maneja adecuadamente los valores de retorno nos especificados durante el análisis de un documento Word, lo que permite a atacantes remotos ejecutar código de su elección a través ... • http://www.securityfocus.com/archive/1/514295/100/0/threaded • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 57%CPEs: 2EXPL: 0

CVE-2010-3216

https://notcve.org/view.php?id=CVE-2010-3216

13 Oct 2010 — Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability." Word 2002 SP3 y Office 2004, de Microsoft para Mac, permiten a los atacantes remotos ejecutar código arbitrario por medio de un documento de Word especialmente diseñado que contiene marcadores que desencadenan el uso de un puntero no válido y corrupción en memoria, ta... • http://www.securityfocus.com/archive/1/514291/100/0/threaded • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 54%CPEs: 2EXPL: 0

CVE-2010-3220

https://notcve.org/view.php?id=CVE-2010-3220

13 Oct 2010 — Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability." Vulnerabilidad no especificada en Microsoft Word 2002 SP3 y Office 2004 para Mac, permite a atacantes remotos ejecutar código de su elección a través de documentos Word manipulados que inician una corrupción de la memoria, también conocido como "Word Parsing Vulnerability". • http://www.us-cert.gov/cas/techalerts/TA10-285A.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 54%CPEs: 4EXPL: 0

CVE-2010-3221

https://notcve.org/view.php?id=CVE-2010-3221

13 Oct 2010 — Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability." Microsoft Word 2002 SP3 y 2003 SP3, Office 2004 para Mac, y Word Viewer no maneja adecuadamente un registro mal formado durante el análisis de un documento Word, lo que permite a atacantes remotos ejecutar código d... • http://www.us-cert.gov/cas/techalerts/TA10-285A.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 60%CPEs: 4EXPL: 0

CVE-2010-3231

https://notcve.org/view.php?id=CVE-2010-3231

13 Oct 2010 — Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability." Microsoft Excel 2002 SP3, Office 2004 y 2008 para Mac, y Open XML File Format Converter para Mac no valida correctamente la información de registro, lo cual permite a los atacantes remotos ejecutar código a su elección a t... • http://www.us-cert.gov/cas/techalerts/TA10-285A.html • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 57%CPEs: 7EXPL: 0

CVE-2010-3232

https://notcve.org/view.php?id=CVE-2010-3232

13 Oct 2010 — Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability." Microsoft Excel 2003 SP3 y 2007 SP2; Office 2004 y 2008 para Mac; Open XML File Format Converter para Mac; Excel Viewer SP2... • http://www.us-cert.gov/cas/techalerts/TA10-285A.html • CWE-20: Improper Input Validation •