CVSS: 9.3EPSS: 34%CPEs: 1EXPL: 0CVE-2015-1683
https://notcve.org/view.php?id=CVE-2015-1683
13 May 2015 — Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Microsoft Office 2007 SP3 permite a atacantes remotos ejecutar código arbitrario a través de un documento manipulado, también conocido como 'vulnerabilidad de la corrupción de memoria de Microsoft Office.' • http://www.securitytracker.com/id/1032295 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 37%CPEs: 5EXPL: 0CVE-2014-6362
https://notcve.org/view.php?id=CVE-2014-6362
11 Feb 2015 — Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability." Vulnerabilidad de uso después de liberación en Microsoft Office 2007 SP3, 2010 SP2, y 2013 Gold y SP1 permite a atacantes remotos evadir el mecanismo de protección ASLR a través de un documento manipulado, también conocido como 'vulnerabilidad de uso después de liberaci... • http://www.securityfocus.com/bid/72467 •
CVSS: 9.3EPSS: 31%CPEs: 8EXPL: 0CVE-2014-6364
https://notcve.org/view.php?id=CVE-2014-6364
11 Dec 2014 — Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." Vulnerabilidad de uso después de liberación en Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, y SP2; y 2013 RT Gold y SP1 permite a atacantes remotos ejecutar código arbitrario a través de un documento Office manipulado, también conocido como ... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-082 •
CVSS: 9.3EPSS: 35%CPEs: 12EXPL: 0CVE-2014-4117 – Microsoft Word Style Tag Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2014-4117
14 Oct 2014 — Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka "Microsoft Word File Format Vulnerability." Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 y SP2, Word 2010 SP1 y SP2, Office for Mac 2011, Office Compatibil... • http://secunia.com/advisories/60973 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 18%CPEs: 5EXPL: 0CVE-2006-1318
https://notcve.org/view.php?id=CVE-2006-1318
19 Sep 2014 — Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record lengths, which allows remote attackers to execute arbitrary code via a malformed control in an Office document, aka "Microsoft Office Control Vulnerability." Microsoft Office 2003 SP1 y SP2, Office XP SP3, Office 2003 SP3, Office 2004 para Mac y Office X para Mac no analiza debidamente la longitud del registro, lo que permite a atacantes remotos ejecutar código arbitrario... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 25%CPEs: 7EXPL: 0CVE-2014-1756
https://notcve.org/view.php?id=CVE-2014-1756
14 May 2014 — Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Microsoft Office Chinese Grammar Checking Vulnerability." Vulnerabilidad de ruta de búsqueda no confiable en Microsoft Office 2007 SP3, 2010 SP1 y SP2 y 2013 Gold, SP1, RT y RT SP... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023 •
CVSS: 6.8EPSS: 12%CPEs: 7EXPL: 0CVE-2014-1809
https://notcve.org/view.php?id=CVE-2014-1809
14 May 2014 — The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka "MSCOMCTL ASLR Vulnerability." La libraría MSCOMCTL en Microsoft Office 2007 SP3, 2010 SP1 y SP2 y 2013 Gold, SP1, RT y RT SP1 facilita a atacantes remotos evadir el mecanismo de protección ASLR a través de un sitio web manipulado, tal y como fue demostrado activam... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 9%CPEs: 8EXPL: 0CVE-2014-2730
https://notcve.org/view.php?id=CVE-2014-2730
05 Apr 2014 — The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption and persistent application hang) via a crafted XML document containing a large number of nested entity references, as demonstrated by a crafted text/plain e-mail message to Outlook, a similar issue to CVE-2003-1564. El analizador XML en Microsoft Office 2007 SP3, 2010 SP1 y ... • http://www.securityfocus.com/archive/1/531722/100/0/threaded • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 14%CPEs: 5EXPL: 0CVE-2013-5057
https://notcve.org/view.php?id=CVE-2013-5057
11 Dec 2013 — hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka "HXDS ASLR Vulnerability." hxds.dll en Microsoft Office 2007 SP3 y 2010 SP1 y SP2 no implementa el mecanismo de protección ASLR, lo que hace que sea más fácil para los atacantes remotos ejecutar código arb... • http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 47%CPEs: 2EXPL: 0CVE-2013-0082
https://notcve.org/view.php?id=CVE-2013-0082
13 Nov 2013 — Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "WPD File Format Memory Corruption Vulnerability." Microsoft Office 2003 SP3 y 2007 SP3 permite a atacantes remotos ejecutar código arbitrario a través de documentos WordPerfect (.wpd) manipulados, también conocido como "Vulnerablidad de Corrupción de Memoria en el Formato de Archivo WPD". • http://www.us-cert.gov/ncas/alerts/TA13-317A • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •