Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Office Converter Pack · all components

Priority MEDIUM 64

Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to ex…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31232 Published 2009-12-09 No fix listed CWE-189
Priority MEDIUM 64

WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32172 Published 2008-08-12 No fix listed CWE-399
Priority MEDIUM 64

Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30308 Published 2008-08-12 No fix listed CWE-399
Priority MEDIUM 63

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28849 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 61

Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2467 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 61

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Of…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2467 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 59

The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a craf…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20463 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 59

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20463 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 59

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21221 Published 2010-12-16 No fix listed CWE-189
Open these records in search →