Priority HIGH 66
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.35905 · Published 2008-08-12 · No fix listed CWE-399
Priority MEDIUM 64
Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to ex…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.31232 · Published 2009-12-09 · No fix listed CWE-189
Priority MEDIUM 64
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.32172 · Published 2008-08-12 · No fix listed CWE-399
Priority MEDIUM 64
Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.30308 · Published 2008-08-12 · No fix listed CWE-399
Priority MEDIUM 64
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.3008 · Published 2008-08-12 · No fix listed CWE-399
Priority MEDIUM 64
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka th…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.30308 · Published 2008-08-12 · No fix listed CWE-94
Priority MEDIUM 63
Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.28849 · Published 2010-12-16 · No fix listed CWE-119
Priority MEDIUM 63
The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.28446 · Published 2009-04-15 · No fix listed CWE-20
Priority MEDIUM 61
Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office doc…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.2467 · Published 2010-12-16 · No fix listed CWE-119
Priority MEDIUM 61
Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.2467 · Published 2010-12-16 · No fix listed CWE-119
Priority MEDIUM 61
Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Of…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.2467 · Published 2010-12-16 · No fix listed CWE-119
Priority MEDIUM 59
The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a craf…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20463 · Published 2010-12-16 · No fix listed CWE-119
Priority MEDIUM 59
The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20463 · Published 2010-12-16 · No fix listed CWE-119
Priority MEDIUM 59
Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.21221 · Published 2010-12-16 · No fix listed CWE-189
Priority LOW 35
Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01909 · Published 2000-03-22 · No fix listed